# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 05.08.2022 09:49:24.944 Process: id = "1" image_name = "9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe" page_root = "0x3aac4000" os_pid = "0x139c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7b4" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 117 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 118 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 119 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 120 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 121 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 122 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 123 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 124 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 125 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 126 start_va = 0x400000 end_va = 0x45ffff monitored = 1 entry_point = 0x45298e region_type = mapped_file name = "9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe") Region: id = 127 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 128 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 129 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 130 start_va = 0x7fff0000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 131 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 132 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 271 start_va = 0x460000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 272 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 273 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 274 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 275 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 276 start_va = 0x460000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 277 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 278 start_va = 0x6f740000 end_va = 0x6f798fff monitored = 1 entry_point = 0x6f750780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 279 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 280 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 281 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 282 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 283 start_va = 0x660000 end_va = 0x71dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 284 start_va = 0x720000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000720000" filename = "" Region: id = 285 start_va = 0x73e50000 end_va = 0x73ee1fff monitored = 0 entry_point = 0x73e90380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 286 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 287 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 288 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 289 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 290 start_va = 0x460000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 291 start_va = 0x510000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 292 start_va = 0x720000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000720000" filename = "" Region: id = 293 start_va = 0x900000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 294 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 295 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 296 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 297 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 298 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 299 start_va = 0x820000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 300 start_va = 0x6f830000 end_va = 0x6f8acfff monitored = 1 entry_point = 0x6f840db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 301 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 302 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 303 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 304 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 305 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 306 start_va = 0x910000 end_va = 0xa97fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 307 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 308 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 309 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 310 start_va = 0xaa0000 end_va = 0xc20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000aa0000" filename = "" Region: id = 311 start_va = 0xc30000 end_va = 0x202ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c30000" filename = "" Region: id = 312 start_va = 0x4a0000 end_va = 0x4fbfff monitored = 1 entry_point = 0x4f298e region_type = mapped_file name = "9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9f532c8749bc71b3fc723d42f86300ae5a583515817da2aad40c858f163d01f8.exe") Region: id = 313 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 314 start_va = 0x6f820000 end_va = 0x6f827fff monitored = 0 entry_point = 0x6f8217b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 315 start_va = 0x6e3e0000 end_va = 0x6eac0fff monitored = 1 entry_point = 0x6e40cd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 316 start_va = 0x6e2e0000 end_va = 0x6e3d4fff monitored = 0 entry_point = 0x6e334160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 317 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 318 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 319 start_va = 0x4a0000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 320 start_va = 0x4b0000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 321 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 322 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 323 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 324 start_va = 0x4f0000 end_va = 0x4f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 325 start_va = 0x500000 end_va = 0x500fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 326 start_va = 0x610000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 327 start_va = 0x820000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 328 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 329 start_va = 0x820000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 330 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 331 start_va = 0x2030000 end_va = 0x212ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 332 start_va = 0x620000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 333 start_va = 0x2130000 end_va = 0x412ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 334 start_va = 0x4130000 end_va = 0x41cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004130000" filename = "" Region: id = 335 start_va = 0x8c0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 336 start_va = 0x41d0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041d0000" filename = "" Region: id = 337 start_va = 0x42d0000 end_va = 0x4606fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 338 start_va = 0x6d020000 end_va = 0x6e2d1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll") Region: id = 339 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 340 start_va = 0x4610000 end_va = 0x46a0fff monitored = 0 entry_point = 0x4648cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 341 start_va = 0x620000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 342 start_va = 0x6f6c0000 end_va = 0x6f73ffff monitored = 1 entry_point = 0x6f6c1180 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 343 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 344 start_va = 0x630000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 345 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 346 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 347 start_va = 0x4610000 end_va = 0x46cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004610000" filename = "" Region: id = 348 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 349 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 350 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 351 start_va = 0x4610000 end_va = 0x464ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004610000" filename = "" Region: id = 352 start_va = 0x46c0000 end_va = 0x46cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046c0000" filename = "" Region: id = 353 start_va = 0x46d0000 end_va = 0x47cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046d0000" filename = "" Region: id = 354 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 355 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 356 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 357 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 358 start_va = 0x47d0000 end_va = 0x57cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 359 start_va = 0x57d0000 end_va = 0x58fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000057d0000" filename = "" Region: id = 360 start_va = 0x5900000 end_va = 0x68fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 361 start_va = 0x6900000 end_va = 0x6b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006900000" filename = "" Region: id = 362 start_va = 0x4650000 end_va = 0x4692fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004650000" filename = "" Region: id = 363 start_va = 0x6b50000 end_va = 0x7b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b50000" filename = "" Region: id = 364 start_va = 0x7b50000 end_va = 0x8b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007b50000" filename = "" Region: id = 365 start_va = 0x4130000 end_va = 0x4191fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 366 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 367 start_va = 0x6ecf0000 end_va = 0x6f6bbfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\1be7a15b1f33bf22e4f53aaf45518c77\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\1be7a15b1f33bf22e4f53aaf45518c77\\system.ni.dll") Region: id = 368 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 369 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 370 start_va = 0x47d0000 end_va = 0x4812fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000047d0000" filename = "" Region: id = 371 start_va = 0x71200000 end_va = 0x71212fff monitored = 0 entry_point = 0x71209950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 372 start_va = 0x70230000 end_va = 0x7025efff monitored = 0 entry_point = 0x702495e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 373 start_va = 0x71560000 end_va = 0x7157afff monitored = 0 entry_point = 0x71569050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 374 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 375 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 376 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 377 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 378 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 379 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 380 start_va = 0x41a0000 end_va = 0x41affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041a0000" filename = "" Region: id = 381 start_va = 0x41b0000 end_va = 0x41bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041b0000" filename = "" Region: id = 382 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 383 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 384 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 385 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 386 start_va = 0x4820000 end_va = 0x485ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 387 start_va = 0x4860000 end_va = 0x495ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 388 start_va = 0x4960000 end_va = 0x4a55fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Region: id = 389 start_va = 0x4960000 end_va = 0x49f2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Region: id = 390 start_va = 0x4960000 end_va = 0x4afefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Region: id = 391 start_va = 0x4b00000 end_va = 0x4b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 392 start_va = 0x4b40000 end_va = 0x4c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 393 start_va = 0x4960000 end_va = 0x4afafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Thread: id = 1 os_tid = 0x13a0 [0082.344] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0082.442] RoInitialize () returned 0x1 [0082.443] RoUninitialize () returned 0x0 [0084.020] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x42800, lpName=0x0) returned 0x264 [0084.021] memcpy (in: _Dst=0x4650000, _Src=0x39ba150, _Size=0x42800 | out: _Dst=0x4650000) returned 0x4650000 [0084.025] CloseHandle (hObject=0x264) returned 1 [0086.724] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x42200, lpName=0x0) returned 0x27c [0086.725] memcpy (in: _Dst=0x47d0000, _Src=0x3935510, _Size=0x42200 | out: _Dst=0x47d0000) returned 0x47d0000 [0086.739] CloseHandle (hObject=0x27c) returned 1 [0088.403] CoTaskMemAlloc (cb=0xd) returned 0x563618 [0088.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219d694, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.404] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.405] CoTaskMemFree (pv=0x563618) [0088.415] CoTaskMemAlloc (cb=0x11) returned 0x554438 [0088.415] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResumeThread", cchWideChar=12, lpMultiByteStr=0x219d6cc, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResumeThread", lpUsedDefaultChar=0x0) returned 12 [0088.416] GetProcAddress (hModule=0x76720000, lpProcName="ResumeThread") returned 0x7673a800 [0088.416] CoTaskMemFree (pv=0x554438) [0088.426] CoTaskMemAlloc (cb=0xd) returned 0x563858 [0088.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219d7c0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.426] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.426] CoTaskMemFree (pv=0x563858) [0088.426] CoTaskMemAlloc (cb=0x1a) returned 0x56f870 [0088.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wow64SetThreadContext", cchWideChar=21, lpMultiByteStr=0x219d7f8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wow64SetThreadContext", lpUsedDefaultChar=0x0) returned 21 [0088.426] GetProcAddress (hModule=0x76720000, lpProcName="Wow64SetThreadContext") returned 0x76763e60 [0088.426] CoTaskMemFree (pv=0x56f870) [0088.440] CoTaskMemAlloc (cb=0xd) returned 0x563798 [0088.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219d8e0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.440] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.441] CoTaskMemFree (pv=0x563798) [0088.441] CoTaskMemAlloc (cb=0x15) returned 0x554298 [0088.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetThreadContext", cchWideChar=16, lpMultiByteStr=0x219d918, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetThreadContext", lpUsedDefaultChar=0x0) returned 16 [0088.441] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadContext") returned 0x76762490 [0088.441] CoTaskMemFree (pv=0x554298) [0088.442] CoTaskMemAlloc (cb=0xd) returned 0x563810 [0088.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219d9fc, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.442] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.443] CoTaskMemFree (pv=0x563810) [0088.443] CoTaskMemAlloc (cb=0x1a) returned 0x56f870 [0088.443] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wow64GetThreadContext", cchWideChar=21, lpMultiByteStr=0x219da34, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wow64GetThreadContext", lpUsedDefaultChar=0x0) returned 21 [0088.443] GetProcAddress (hModule=0x76720000, lpProcName="Wow64GetThreadContext") returned 0x76763e30 [0088.443] CoTaskMemFree (pv=0x56f870) [0088.444] CoTaskMemAlloc (cb=0xd) returned 0x563840 [0088.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219db1c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.445] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.445] CoTaskMemFree (pv=0x563840) [0088.445] CoTaskMemAlloc (cb=0x15) returned 0x554318 [0088.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetThreadContext", cchWideChar=16, lpMultiByteStr=0x219db54, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetThreadContext", lpUsedDefaultChar=0x0) returned 16 [0088.445] GetProcAddress (hModule=0x76720000, lpProcName="GetThreadContext") returned 0x7673ec60 [0088.445] CoTaskMemFree (pv=0x554318) [0088.447] CoTaskMemAlloc (cb=0xd) returned 0x563780 [0088.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219dc2c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.447] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.447] CoTaskMemFree (pv=0x563780) [0088.447] CoTaskMemAlloc (cb=0x13) returned 0x554278 [0088.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VirtualAllocEx", cchWideChar=14, lpMultiByteStr=0x219dc64, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VirtualAllocEx", lpUsedDefaultChar=0x0) returned 14 [0088.447] GetProcAddress (hModule=0x76720000, lpProcName="VirtualAllocEx") returned 0x76762730 [0088.447] CoTaskMemFree (pv=0x554278) [0088.469] CoTaskMemAlloc (cb=0xd) returned 0x563828 [0088.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219dd3c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.469] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.469] CoTaskMemFree (pv=0x563828) [0088.469] CoTaskMemAlloc (cb=0x17) returned 0x554478 [0088.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WriteProcessMemory", cchWideChar=18, lpMultiByteStr=0x219dd74, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WriteProcessMemory", lpUsedDefaultChar=0x0) returned 18 [0088.469] GetProcAddress (hModule=0x76720000, lpProcName="WriteProcessMemory") returned 0x76762850 [0088.470] CoTaskMemFree (pv=0x554478) [0088.498] CoTaskMemAlloc (cb=0xd) returned 0x563708 [0088.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219de54, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.500] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.501] CoTaskMemFree (pv=0x563708) [0088.501] CoTaskMemAlloc (cb=0x16) returned 0x5544f8 [0088.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ReadProcessMemory", cchWideChar=17, lpMultiByteStr=0x219de8c, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ReadProcessMemory", lpUsedDefaultChar=0x0) returned 17 [0088.501] GetProcAddress (hModule=0x76720000, lpProcName="ReadProcessMemory") returned 0x76761c80 [0088.501] CoTaskMemFree (pv=0x5544f8) [0088.510] CoTaskMemAlloc (cb=0xa) returned 0x5637b0 [0088.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ntdll", cchWideChar=5, lpMultiByteStr=0x219df68, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ntdll", lpUsedDefaultChar=0x0) returned 5 [0088.510] LoadLibraryA (lpLibFileName="ntdll") returned 0x771d0000 [0088.510] CoTaskMemFree (pv=0x5637b0) [0088.510] CoTaskMemAlloc (cb=0x19) returned 0x56fac8 [0088.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ZwUnmapViewOfSection", cchWideChar=20, lpMultiByteStr=0x219df94, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ZwUnmapViewOfSection", lpUsedDefaultChar=0x0) returned 20 [0088.510] GetProcAddress (hModule=0x771d0000, lpProcName="ZwUnmapViewOfSection") returned 0x77246f40 [0088.511] CoTaskMemFree (pv=0x56fac8) [0088.520] CoTaskMemAlloc (cb=0xd) returned 0x563888 [0088.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x219e078, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0088.520] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0088.520] CoTaskMemFree (pv=0x563888) [0088.520] CoTaskMemAlloc (cb=0x13) returned 0x554238 [0088.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateProcessA", cchWideChar=14, lpMultiByteStr=0x219e0b0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateProcessA", lpUsedDefaultChar=0x0) returned 14 [0088.520] GetProcAddress (hModule=0x76720000, lpProcName="CreateProcessA") returned 0x76760750 [0088.521] CoTaskMemFree (pv=0x554238) [0088.892] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76720000 [0088.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="IsDebuggerPresent", cchWideChar=17, lpMultiByteStr=0x19eeb0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsDebuggerPresent×b", lpUsedDefaultChar=0x0) returned 17 [0088.903] GetProcAddress (hModule=0x76720000, lpProcName="IsDebuggerPresent") returned 0x7673b0b0 [0088.918] IsDebuggerPresent () returned 0 [0088.936] GetCurrentProcessId () returned 0x139c [0089.091] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x139c) returned 0x280 [0089.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CheckRemoteDebuggerPresent", cchWideChar=26, lpMultiByteStr=0x19eea8, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CheckRemoteDebuggerPresentb", lpUsedDefaultChar=0x0) returned 26 [0089.109] GetProcAddress (hModule=0x76720000, lpProcName="CheckRemoteDebuggerPresent") returned 0x7673f3f0 [0089.116] CheckRemoteDebuggerPresent (in: hProcess=0x280, pbDebuggerPresent=0x19f060 | out: pbDebuggerPresent=0x19f060) returned 1 [0089.121] CloseHandle (hObject=0x280) returned 1 [0089.121] CloseHandle (hObject=0x12345678) returned 0 [0089.122] LoadLibraryW (lpLibFileName="user32.dll") returned 0x743d0000 [0089.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EnumWindows", cchWideChar=11, lpMultiByteStr=0x19eeb4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EnumWindows", lpUsedDefaultChar=0x0) returned 11 [0089.131] GetProcAddress (hModule=0x743d0000, lpProcName="EnumWindows") returned 0x74403a60 [0089.140] EnumWindows (lpEnumFunc=0x46c05fe, lParam=0x0) returned 1 [0089.310] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.386] GetClassNameW (in: hWnd=0x1014a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0089.387] CoTaskMemFree (pv=0x570ce0) [0089.388] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.388] GetClassNameW (in: hWnd=0x1010e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0089.388] CoTaskMemFree (pv=0x570ce0) [0089.388] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.388] GetClassNameW (in: hWnd=0x100d8, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.388] CoTaskMemFree (pv=0x570ce0) [0089.388] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.389] GetClassNameW (in: hWnd=0x100b2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.389] CoTaskMemFree (pv=0x570ce0) [0089.389] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.389] GetClassNameW (in: hWnd=0x100b6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.389] CoTaskMemFree (pv=0x570ce0) [0089.389] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.389] GetClassNameW (in: hWnd=0x100c2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.389] CoTaskMemFree (pv=0x570ce0) [0089.389] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.389] GetClassNameW (in: hWnd=0x100cc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.389] CoTaskMemFree (pv=0x570ce0) [0089.389] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.390] GetClassNameW (in: hWnd=0x100d0, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.390] CoTaskMemFree (pv=0x570ce0) [0089.390] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.390] GetClassNameW (in: hWnd=0x10098, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.390] CoTaskMemFree (pv=0x570ce0) [0089.390] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.390] GetClassNameW (in: hWnd=0x100a6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.390] CoTaskMemFree (pv=0x570ce0) [0089.390] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.390] GetClassNameW (in: hWnd=0x100ca, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.390] CoTaskMemFree (pv=0x570ce0) [0089.391] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.391] GetClassNameW (in: hWnd=0x1008c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0089.391] CoTaskMemFree (pv=0x570ce0) [0089.391] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.391] GetClassNameW (in: hWnd=0x20030, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ATL:00007FFA00814120") returned 20 [0089.391] CoTaskMemFree (pv=0x570ce0) [0089.391] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.391] GetClassNameW (in: hWnd=0x100e6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.391] CoTaskMemFree (pv=0x570ce0) [0089.391] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.391] GetClassNameW (in: hWnd=0x100da, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0089.392] CoTaskMemFree (pv=0x570ce0) [0089.392] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.392] GetClassNameW (in: hWnd=0x1037e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Activity_Which_three_app") returned 24 [0089.392] CoTaskMemFree (pv=0x570ce0) [0089.392] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.392] GetClassNameW (in: hWnd=0x202a6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="VSyncHelper-046EB6E8-7d643d0") returned 28 [0089.392] CoTaskMemFree (pv=0x570ce0) [0089.392] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.392] GetClassNameW (in: hWnd=0x202c4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.392] CoTaskMemFree (pv=0x570ce0) [0089.392] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.392] GetClassNameW (in: hWnd=0x202ce, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0089.393] CoTaskMemFree (pv=0x570ce0) [0089.393] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.393] GetClassNameW (in: hWnd=0x10372, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Month_together_Control_window") returned 29 [0089.393] CoTaskMemFree (pv=0x570ce0) [0089.393] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.393] GetClassNameW (in: hWnd=0x1037c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="candidate_Include_window") returned 24 [0089.393] CoTaskMemFree (pv=0x570ce0) [0089.393] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.393] GetClassNameW (in: hWnd=0x10374, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Tvtaxapp") returned 8 [0089.393] CoTaskMemFree (pv=0x570ce0) [0089.394] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.394] GetClassNameW (in: hWnd=0x1036c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="wallmajorwin") returned 12 [0089.394] CoTaskMemFree (pv=0x570ce0) [0089.394] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.394] GetClassNameW (in: hWnd=0x10336, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="fpos_class") returned 10 [0089.394] CoTaskMemFree (pv=0x570ce0) [0089.394] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.394] GetClassNameW (in: hWnd=0x1034e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="utg2wnd") returned 7 [0089.394] CoTaskMemFree (pv=0x570ce0) [0089.394] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.394] GetClassNameW (in: hWnd=0x10324, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="centralcreditcardwin") returned 20 [0089.394] CoTaskMemFree (pv=0x570ce0) [0089.394] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.394] GetClassNameW (in: hWnd=0x10348, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="spgagentserviceclass") returned 20 [0089.395] CoTaskMemFree (pv=0x570ce0) [0089.395] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.395] GetClassNameW (in: hWnd=0x10342, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="omniposclass") returned 12 [0089.395] CoTaskMemFree (pv=0x570ce0) [0089.395] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.395] GetClassNameW (in: hWnd=0x1033c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="mxslipstream_class") returned 18 [0089.395] CoTaskMemFree (pv=0x570ce0) [0089.395] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.395] GetClassNameW (in: hWnd=0x10340, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="spcwin_app") returned 10 [0089.395] CoTaskMemFree (pv=0x570ce0) [0089.395] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.396] GetClassNameW (in: hWnd=0x1030c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="afr38win") returned 8 [0089.396] CoTaskMemFree (pv=0x570ce0) [0089.396] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.396] GetClassNameW (in: hWnd=0x10332, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="issposwin") returned 9 [0089.396] CoTaskMemFree (pv=0x570ce0) [0089.396] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.396] GetClassNameW (in: hWnd=0x10304, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="yahoomessengercls") returned 17 [0089.396] CoTaskMemFree (pv=0x570ce0) [0089.396] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.396] GetClassNameW (in: hWnd=0x10322, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="creditservicewnd") returned 16 [0089.396] CoTaskMemFree (pv=0x570ce0) [0089.396] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.397] GetClassNameW (in: hWnd=0x1032a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="edcsvrwin") returned 9 [0089.397] CoTaskMemFree (pv=0x570ce0) [0089.397] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.397] GetClassNameW (in: hWnd=0x102fa, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="webdrive_wnd") returned 12 [0089.397] CoTaskMemFree (pv=0x570ce0) [0089.397] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.397] GetClassNameW (in: hWnd=0x10318, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ccv_server_cls") returned 14 [0089.397] CoTaskMemFree (pv=0x570ce0) [0089.397] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.397] GetClassNameW (in: hWnd=0x102f6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="whatsappwin") returned 11 [0089.397] CoTaskMemFree (pv=0x570ce0) [0089.397] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.397] GetClassNameW (in: hWnd=0x1031a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="aldelowindow") returned 12 [0089.398] CoTaskMemFree (pv=0x570ce0) [0089.398] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.398] GetClassNameW (in: hWnd=0x102f2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="trillian_window") returned 15 [0089.398] CoTaskMemFree (pv=0x570ce0) [0089.398] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.398] GetClassNameW (in: hWnd=0x1030e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="accupos_") returned 8 [0089.398] CoTaskMemFree (pv=0x570ce0) [0089.398] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.398] GetClassNameW (in: hWnd=0x10302, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="active-chargewnd") returned 16 [0089.398] CoTaskMemFree (pv=0x570ce0) [0089.398] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.398] GetClassNameW (in: hWnd=0x102fe, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="winscp_win") returned 10 [0089.399] CoTaskMemFree (pv=0x570ce0) [0089.399] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.399] GetClassNameW (in: hWnd=0x102d8, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="smartftp_app") returned 12 [0089.399] CoTaskMemFree (pv=0x570ce0) [0089.399] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.399] GetClassNameW (in: hWnd=0x102d6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="skype_wnd") returned 9 [0089.399] CoTaskMemFree (pv=0x570ce0) [0089.399] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.399] GetClassNameW (in: hWnd=0x102ca, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="outlook_wnd") returned 11 [0089.399] CoTaskMemFree (pv=0x570ce0) [0089.399] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.399] GetClassNameW (in: hWnd=0x102de, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="thunderbirdwnd") returned 14 [0089.399] CoTaskMemFree (pv=0x570ce0) [0089.400] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.400] GetClassNameW (in: hWnd=0x102d4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="scriptftp_app") returned 13 [0089.400] CoTaskMemFree (pv=0x570ce0) [0089.400] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.400] GetClassNameW (in: hWnd=0x102c8, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="pidgin_") returned 7 [0089.400] CoTaskMemFree (pv=0x570ce0) [0089.400] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.400] GetClassNameW (in: hWnd=0x102ae, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0089.400] CoTaskMemFree (pv=0x570ce0) [0089.400] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.400] GetClassNameW (in: hWnd=0x102bc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="operamail_cls") returned 13 [0089.400] CoTaskMemFree (pv=0x570ce0) [0089.401] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.401] GetClassNameW (in: hWnd=0x102b8, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="notepad_cls") returned 11 [0089.401] CoTaskMemFree (pv=0x570ce0) [0089.401] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.401] GetClassNameW (in: hWnd=0x102b6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ncftp_") returned 6 [0089.401] CoTaskMemFree (pv=0x570ce0) [0089.401] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.401] GetClassNameW (in: hWnd=0x102a4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="gmailnotifierpro") returned 16 [0089.401] CoTaskMemFree (pv=0x570ce0) [0089.401] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.401] GetClassNameW (in: hWnd=0x10298, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0089.401] CoTaskMemFree (pv=0x570ce0) [0089.401] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.402] GetClassNameW (in: hWnd=0x102ac, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="icqwin") returned 6 [0089.402] CoTaskMemFree (pv=0x570ce0) [0089.402] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.402] GetClassNameW (in: hWnd=0x102a2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="foxmailincmail_") returned 15 [0089.402] CoTaskMemFree (pv=0x570ce0) [0089.402] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.402] GetClassNameW (in: hWnd=0x10290, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="flashfxp_cls") returned 12 [0089.402] CoTaskMemFree (pv=0x570ce0) [0089.402] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.402] GetClassNameW (in: hWnd=0x10294, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="flingcls") returned 8 [0089.402] CoTaskMemFree (pv=0x570ce0) [0089.402] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.402] GetClassNameW (in: hWnd=0x10284, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="far") returned 3 [0089.402] CoTaskMemFree (pv=0x570ce0) [0089.403] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.403] GetClassNameW (in: hWnd=0x10276, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0089.403] CoTaskMemFree (pv=0x570ce0) [0089.403] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.403] GetClassNameW (in: hWnd=0x10278, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="bitkinex_window") returned 15 [0089.403] CoTaskMemFree (pv=0x570ce0) [0089.403] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.403] GetClassNameW (in: hWnd=0x20222, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="barcawindow") returned 11 [0089.403] CoTaskMemFree (pv=0x570ce0) [0089.403] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.403] GetClassNameW (in: hWnd=0x2021a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="3dftp_window") returned 12 [0089.403] CoTaskMemFree (pv=0x570ce0) [0089.404] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.404] GetClassNameW (in: hWnd=0x2021c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="alftp_") returned 6 [0089.404] CoTaskMemFree (pv=0x570ce0) [0089.404] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.404] GetClassNameW (in: hWnd=0x20216, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="absolutetelnet_window") returned 21 [0089.404] CoTaskMemFree (pv=0x570ce0) [0089.404] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.404] GetClassNameW (in: hWnd=0x201f4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0089.404] CoTaskMemFree (pv=0x570ce0) [0089.404] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.404] GetClassNameW (in: hWnd=0x20228, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0089.404] CoTaskMemFree (pv=0x570ce0) [0089.405] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.405] GetClassNameW (in: hWnd=0x1026a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="whocameraSuchwnd") returned 16 [0089.405] CoTaskMemFree (pv=0x570ce0) [0089.405] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.405] GetClassNameW (in: hWnd=0x1026c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0089.405] CoTaskMemFree (pv=0x570ce0) [0089.405] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.405] GetClassNameW (in: hWnd=0x1024a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="else_deep_let_class") returned 19 [0089.405] CoTaskMemFree (pv=0x570ce0) [0089.405] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.405] GetClassNameW (in: hWnd=0x10248, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="seek_cls") returned 8 [0089.405] CoTaskMemFree (pv=0x570ce0) [0089.405] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.406] GetClassNameW (in: hWnd=0x10246, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Marketapp") returned 9 [0089.406] CoTaskMemFree (pv=0x570ce0) [0089.406] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.406] GetClassNameW (in: hWnd=0x10244, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="well_") returned 5 [0089.406] CoTaskMemFree (pv=0x570ce0) [0089.406] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.406] GetClassNameW (in: hWnd=0x10232, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="happyMuchbetterwin") returned 18 [0089.406] CoTaskMemFree (pv=0x570ce0) [0089.406] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.406] GetClassNameW (in: hWnd=0x10234, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="believe_room_Because_cls") returned 24 [0089.406] CoTaskMemFree (pv=0x570ce0) [0089.406] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.406] GetClassNameW (in: hWnd=0x10236, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="peoplecls") returned 9 [0089.407] CoTaskMemFree (pv=0x570ce0) [0089.407] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.407] GetClassNameW (in: hWnd=0x10238, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Bigapp") returned 6 [0089.407] CoTaskMemFree (pv=0x570ce0) [0089.407] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.407] GetClassNameW (in: hWnd=0x1023a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="trial_Event_cls") returned 15 [0089.407] CoTaskMemFree (pv=0x570ce0) [0089.407] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.407] GetClassNameW (in: hWnd=0x10242, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="life_Father_Ever_wnd") returned 20 [0089.407] CoTaskMemFree (pv=0x570ce0) [0089.407] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.407] GetClassNameW (in: hWnd=0x10240, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="feelteachwin") returned 12 [0089.407] CoTaskMemFree (pv=0x570ce0) [0089.408] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.408] GetClassNameW (in: hWnd=0x1023e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="AheadCustomerGovernmentwnd") returned 26 [0089.408] CoTaskMemFree (pv=0x570ce0) [0089.408] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.408] GetClassNameW (in: hWnd=0x1023c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="jobNextwnd") returned 10 [0089.408] CoTaskMemFree (pv=0x570ce0) [0089.408] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.408] GetClassNameW (in: hWnd=0x20214, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="example_win") returned 11 [0089.408] CoTaskMemFree (pv=0x570ce0) [0089.408] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.408] GetClassNameW (in: hWnd=0x1020e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.408] CoTaskMemFree (pv=0x570ce0) [0089.409] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.409] GetClassNameW (in: hWnd=0x10200, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.409] CoTaskMemFree (pv=0x570ce0) [0089.409] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.409] GetClassNameW (in: hWnd=0x101ee, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0089.409] CoTaskMemFree (pv=0x570ce0) [0089.409] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.409] GetClassNameW (in: hWnd=0x2015e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.409] CoTaskMemFree (pv=0x570ce0) [0089.409] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.410] GetClassNameW (in: hWnd=0x201bc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.410] CoTaskMemFree (pv=0x570ce0) [0089.410] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.410] GetClassNameW (in: hWnd=0x20138, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0089.410] CoTaskMemFree (pv=0x570ce0) [0089.410] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.410] GetClassNameW (in: hWnd=0x401dc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.410] CoTaskMemFree (pv=0x570ce0) [0089.410] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.410] GetClassNameW (in: hWnd=0x6003e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.410] CoTaskMemFree (pv=0x570ce0) [0089.410] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.410] GetClassNameW (in: hWnd=0x2013c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0089.411] CoTaskMemFree (pv=0x570ce0) [0089.411] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.411] GetClassNameW (in: hWnd=0x2013a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0089.411] CoTaskMemFree (pv=0x570ce0) [0089.411] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.411] GetClassNameW (in: hWnd=0x30020, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.411] CoTaskMemFree (pv=0x570ce0) [0089.411] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.411] GetClassNameW (in: hWnd=0x20092, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.411] CoTaskMemFree (pv=0x570ce0) [0089.411] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.411] GetClassNameW (in: hWnd=0x101ca, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ATL:00007FFA08097080") returned 20 [0089.412] CoTaskMemFree (pv=0x570ce0) [0089.412] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.412] GetClassNameW (in: hWnd=0x101be, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.412] CoTaskMemFree (pv=0x570ce0) [0089.412] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.412] GetClassNameW (in: hWnd=0x101b0, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0089.412] CoTaskMemFree (pv=0x570ce0) [0089.412] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.412] GetClassNameW (in: hWnd=0x101ac, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.412] CoTaskMemFree (pv=0x570ce0) [0089.412] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.412] GetClassNameW (in: hWnd=0x101aa, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0089.413] CoTaskMemFree (pv=0x570ce0) [0089.413] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.413] GetClassNameW (in: hWnd=0x10126, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.413] CoTaskMemFree (pv=0x570ce0) [0089.413] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.413] GetClassNameW (in: hWnd=0x1012e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0089.413] CoTaskMemFree (pv=0x570ce0) [0089.413] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.413] GetClassNameW (in: hWnd=0x101a0, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.413] CoTaskMemFree (pv=0x570ce0) [0089.413] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.413] GetClassNameW (in: hWnd=0x101a2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.413] CoTaskMemFree (pv=0x570ce0) [0089.414] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.414] GetClassNameW (in: hWnd=0x1012c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0089.414] CoTaskMemFree (pv=0x570ce0) [0089.414] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.414] GetClassNameW (in: hWnd=0x10124, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0089.414] CoTaskMemFree (pv=0x570ce0) [0089.414] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.414] GetClassNameW (in: hWnd=0x1010a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0089.414] CoTaskMemFree (pv=0x570ce0) [0089.414] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.414] GetClassNameW (in: hWnd=0x10108, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0089.414] CoTaskMemFree (pv=0x570ce0) [0089.415] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.415] GetClassNameW (in: hWnd=0x10100, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0089.415] CoTaskMemFree (pv=0x570ce0) [0089.415] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.415] GetClassNameW (in: hWnd=0x100fc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.415] CoTaskMemFree (pv=0x570ce0) [0089.415] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.415] GetClassNameW (in: hWnd=0x100f6, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.415] CoTaskMemFree (pv=0x570ce0) [0089.415] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.415] GetClassNameW (in: hWnd=0x100f4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.416] CoTaskMemFree (pv=0x570ce0) [0089.416] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.416] GetClassNameW (in: hWnd=0x200e0, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.416] CoTaskMemFree (pv=0x570ce0) [0089.416] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.416] GetClassNameW (in: hWnd=0x100ce, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0089.416] CoTaskMemFree (pv=0x570ce0) [0089.416] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.416] GetClassNameW (in: hWnd=0x2001e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0089.416] CoTaskMemFree (pv=0x570ce0) [0089.416] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.416] GetClassNameW (in: hWnd=0x20034, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0089.417] CoTaskMemFree (pv=0x570ce0) [0089.417] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.417] GetClassNameW (in: hWnd=0x20036, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0089.417] CoTaskMemFree (pv=0x570ce0) [0089.417] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.417] GetClassNameW (in: hWnd=0x2004c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0089.417] CoTaskMemFree (pv=0x570ce0) [0089.417] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.417] GetClassNameW (in: hWnd=0x101d4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.417] CoTaskMemFree (pv=0x570ce0) [0089.417] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.417] GetClassNameW (in: hWnd=0x200f2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.419] CoTaskMemFree (pv=0x570ce0) [0089.420] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.420] GetClassNameW (in: hWnd=0x200ee, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0089.420] CoTaskMemFree (pv=0x570ce0) [0089.420] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.420] GetClassNameW (in: hWnd=0x100ba, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0089.420] CoTaskMemFree (pv=0x570ce0) [0089.420] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.420] GetClassNameW (in: hWnd=0x2007c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0089.420] CoTaskMemFree (pv=0x570ce0) [0089.420] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.420] GetClassNameW (in: hWnd=0x20072, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0089.420] CoTaskMemFree (pv=0x570ce0) [0089.421] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.421] GetClassNameW (in: hWnd=0x4006e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0089.421] CoTaskMemFree (pv=0x570ce0) [0089.421] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.421] GetClassNameW (in: hWnd=0x10024, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0089.421] CoTaskMemFree (pv=0x570ce0) [0089.421] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.421] GetClassNameW (in: hWnd=0x10180, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0089.421] CoTaskMemFree (pv=0x570ce0) [0089.421] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.421] GetClassNameW (in: hWnd=0x30224, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0089.421] CoTaskMemFree (pv=0x570ce0) [0089.421] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.422] GetClassNameW (in: hWnd=0x100de, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0089.422] CoTaskMemFree (pv=0x570ce0) [0089.422] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.422] GetClassNameW (in: hWnd=0x1014c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.422] CoTaskMemFree (pv=0x570ce0) [0089.422] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.422] GetClassNameW (in: hWnd=0x100dc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0089.422] CoTaskMemFree (pv=0x570ce0) [0089.422] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.422] GetClassNameW (in: hWnd=0x1008e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.422] CoTaskMemFree (pv=0x570ce0) [0089.422] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.422] GetClassNameW (in: hWnd=0x10386, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.423] CoTaskMemFree (pv=0x570ce0) [0089.423] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.423] GetClassNameW (in: hWnd=0x20334, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.423] CoTaskMemFree (pv=0x570ce0) [0089.423] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.423] GetClassNameW (in: hWnd=0x10384, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.423] CoTaskMemFree (pv=0x570ce0) [0089.423] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.423] GetClassNameW (in: hWnd=0x10382, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.423] CoTaskMemFree (pv=0x570ce0) [0089.423] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.423] GetClassNameW (in: hWnd=0x10380, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.424] CoTaskMemFree (pv=0x570ce0) [0089.424] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.424] GetClassNameW (in: hWnd=0x2033a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.424] CoTaskMemFree (pv=0x570ce0) [0089.424] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.424] GetClassNameW (in: hWnd=0x1037a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.424] CoTaskMemFree (pv=0x570ce0) [0089.431] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.431] GetClassNameW (in: hWnd=0x10376, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.431] CoTaskMemFree (pv=0x570ce0) [0089.431] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.431] GetClassNameW (in: hWnd=0x1036e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.431] CoTaskMemFree (pv=0x570ce0) [0089.431] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.431] GetClassNameW (in: hWnd=0x10368, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.431] CoTaskMemFree (pv=0x570ce0) [0089.432] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.432] GetClassNameW (in: hWnd=0x10362, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.432] CoTaskMemFree (pv=0x570ce0) [0089.432] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.432] GetClassNameW (in: hWnd=0x10360, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.432] CoTaskMemFree (pv=0x570ce0) [0089.432] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.432] GetClassNameW (in: hWnd=0x1035e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.432] CoTaskMemFree (pv=0x570ce0) [0089.432] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.432] GetClassNameW (in: hWnd=0x1035c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.432] CoTaskMemFree (pv=0x570ce0) [0089.433] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.433] GetClassNameW (in: hWnd=0x1035a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.433] CoTaskMemFree (pv=0x570ce0) [0089.433] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.433] GetClassNameW (in: hWnd=0x10356, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.433] CoTaskMemFree (pv=0x570ce0) [0089.433] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.433] GetClassNameW (in: hWnd=0x10354, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.433] CoTaskMemFree (pv=0x570ce0) [0089.433] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.433] GetClassNameW (in: hWnd=0x10352, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.433] CoTaskMemFree (pv=0x570ce0) [0089.434] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.434] GetClassNameW (in: hWnd=0x10350, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.434] CoTaskMemFree (pv=0x570ce0) [0089.434] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.434] GetClassNameW (in: hWnd=0x1034c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.434] CoTaskMemFree (pv=0x570ce0) [0089.434] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.434] GetClassNameW (in: hWnd=0x1034a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.434] CoTaskMemFree (pv=0x570ce0) [0089.434] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.434] GetClassNameW (in: hWnd=0x2033e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.434] CoTaskMemFree (pv=0x570ce0) [0089.434] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.435] GetClassNameW (in: hWnd=0x10344, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.435] CoTaskMemFree (pv=0x570ce0) [0089.435] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.435] GetClassNameW (in: hWnd=0x10338, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.435] CoTaskMemFree (pv=0x570ce0) [0089.435] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.435] GetClassNameW (in: hWnd=0x1032e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.435] CoTaskMemFree (pv=0x570ce0) [0089.435] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.435] GetClassNameW (in: hWnd=0x1032c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.435] CoTaskMemFree (pv=0x570ce0) [0089.435] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.435] GetClassNameW (in: hWnd=0x1031e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.436] CoTaskMemFree (pv=0x570ce0) [0089.436] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.436] GetClassNameW (in: hWnd=0x10314, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.436] CoTaskMemFree (pv=0x570ce0) [0089.436] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.436] GetClassNameW (in: hWnd=0x10310, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.436] CoTaskMemFree (pv=0x570ce0) [0089.436] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.436] GetClassNameW (in: hWnd=0x10306, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.436] CoTaskMemFree (pv=0x570ce0) [0089.436] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.436] GetClassNameW (in: hWnd=0x102ee, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.436] CoTaskMemFree (pv=0x570ce0) [0089.437] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.437] GetClassNameW (in: hWnd=0x102ec, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.437] CoTaskMemFree (pv=0x570ce0) [0089.437] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.437] GetClassNameW (in: hWnd=0x102e8, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.437] CoTaskMemFree (pv=0x570ce0) [0089.437] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.437] GetClassNameW (in: hWnd=0x102e4, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.437] CoTaskMemFree (pv=0x570ce0) [0089.437] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.437] GetClassNameW (in: hWnd=0x102dc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.437] CoTaskMemFree (pv=0x570ce0) [0089.437] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.437] GetClassNameW (in: hWnd=0x102da, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.438] CoTaskMemFree (pv=0x570ce0) [0089.438] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.438] GetClassNameW (in: hWnd=0x102d2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.438] CoTaskMemFree (pv=0x570ce0) [0089.438] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.438] GetClassNameW (in: hWnd=0x102cc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.438] CoTaskMemFree (pv=0x570ce0) [0089.438] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.438] GetClassNameW (in: hWnd=0x102c2, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.438] CoTaskMemFree (pv=0x570ce0) [0089.438] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.438] GetClassNameW (in: hWnd=0x102c0, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.439] CoTaskMemFree (pv=0x570ce0) [0089.439] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.439] GetClassNameW (in: hWnd=0x102b0, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.439] CoTaskMemFree (pv=0x570ce0) [0089.439] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.439] GetClassNameW (in: hWnd=0x1029a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.439] CoTaskMemFree (pv=0x570ce0) [0089.439] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.439] GetClassNameW (in: hWnd=0x1028c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.439] CoTaskMemFree (pv=0x570ce0) [0089.439] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.439] GetClassNameW (in: hWnd=0x1028a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.439] CoTaskMemFree (pv=0x570ce0) [0089.440] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.440] GetClassNameW (in: hWnd=0x10288, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.440] CoTaskMemFree (pv=0x570ce0) [0089.440] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.440] GetClassNameW (in: hWnd=0x10286, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.441] CoTaskMemFree (pv=0x570ce0) [0089.441] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.441] GetClassNameW (in: hWnd=0x10280, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.441] CoTaskMemFree (pv=0x570ce0) [0089.441] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.441] GetClassNameW (in: hWnd=0x1027a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.441] CoTaskMemFree (pv=0x570ce0) [0089.441] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.441] GetClassNameW (in: hWnd=0x2022a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.441] CoTaskMemFree (pv=0x570ce0) [0089.441] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.441] GetClassNameW (in: hWnd=0x10270, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.442] CoTaskMemFree (pv=0x570ce0) [0089.442] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.442] GetClassNameW (in: hWnd=0x1026e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.442] CoTaskMemFree (pv=0x570ce0) [0089.442] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.442] GetClassNameW (in: hWnd=0x10268, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.442] CoTaskMemFree (pv=0x570ce0) [0089.442] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.442] GetClassNameW (in: hWnd=0x10266, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.442] CoTaskMemFree (pv=0x570ce0) [0089.442] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.442] GetClassNameW (in: hWnd=0x10264, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.442] CoTaskMemFree (pv=0x570ce0) [0089.443] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.443] GetClassNameW (in: hWnd=0x10262, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.443] CoTaskMemFree (pv=0x570ce0) [0089.443] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.443] GetClassNameW (in: hWnd=0x10260, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.443] CoTaskMemFree (pv=0x570ce0) [0089.443] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.443] GetClassNameW (in: hWnd=0x1025e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.443] CoTaskMemFree (pv=0x570ce0) [0089.443] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.443] GetClassNameW (in: hWnd=0x1025c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.443] CoTaskMemFree (pv=0x570ce0) [0089.444] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.444] GetClassNameW (in: hWnd=0x1025a, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.444] CoTaskMemFree (pv=0x570ce0) [0089.444] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.444] GetClassNameW (in: hWnd=0x10258, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.444] CoTaskMemFree (pv=0x570ce0) [0089.444] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.444] GetClassNameW (in: hWnd=0x10256, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.444] CoTaskMemFree (pv=0x570ce0) [0089.444] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.444] GetClassNameW (in: hWnd=0x10254, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.444] CoTaskMemFree (pv=0x570ce0) [0089.445] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.445] GetClassNameW (in: hWnd=0x10250, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.445] CoTaskMemFree (pv=0x570ce0) [0089.445] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.445] GetClassNameW (in: hWnd=0x1024e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.445] CoTaskMemFree (pv=0x570ce0) [0089.445] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.445] GetClassNameW (in: hWnd=0x1024c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.445] CoTaskMemFree (pv=0x570ce0) [0089.445] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.445] GetClassNameW (in: hWnd=0x10210, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.445] CoTaskMemFree (pv=0x570ce0) [0089.446] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.446] GetClassNameW (in: hWnd=0x20148, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.446] CoTaskMemFree (pv=0x570ce0) [0089.446] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.446] GetClassNameW (in: hWnd=0x101cc, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.446] CoTaskMemFree (pv=0x570ce0) [0089.446] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.446] GetClassNameW (in: hWnd=0x101ae, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.446] CoTaskMemFree (pv=0x570ce0) [0089.446] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.446] GetClassNameW (in: hWnd=0x1010c, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.446] CoTaskMemFree (pv=0x570ce0) [0089.446] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.447] GetClassNameW (in: hWnd=0x100fe, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.447] CoTaskMemFree (pv=0x570ce0) [0089.447] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.447] GetClassNameW (in: hWnd=0x100f8, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0089.447] CoTaskMemFree (pv=0x570ce0) [0089.447] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.447] GetClassNameW (in: hWnd=0x100ea, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.447] CoTaskMemFree (pv=0x570ce0) [0089.447] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.447] GetClassNameW (in: hWnd=0x20032, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.447] CoTaskMemFree (pv=0x570ce0) [0089.447] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.448] GetClassNameW (in: hWnd=0x2019e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.448] CoTaskMemFree (pv=0x570ce0) [0089.448] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.448] GetClassNameW (in: hWnd=0x1007e, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.448] CoTaskMemFree (pv=0x570ce0) [0089.448] CoTaskMemAlloc (cb=0x20c) returned 0x570ce0 [0089.448] GetClassNameW (in: hWnd=0x20074, lpClassName=0x570ce0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0089.448] CoTaskMemFree (pv=0x570ce0) [0114.561] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19da58 | out: phkResult=0x19da58*=0x0) returned 0x2 [0114.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19ead4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0114.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe", cchWideChar=56, lpMultiByteStr=0x19ef3c, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe\x96¢b", lpUsedDefaultChar=0x0) returned 56 [0114.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0x19ef38, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04£b", lpUsedDefaultChar=0x0) returned 0 [0114.758] CreateProcessA (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe", lpCommandLine="", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19efd4*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19f4a0 | out: lpCommandLine="", lpProcessInformation=0x19f4a0*(hProcess=0x2ac, hThread=0x2a8, dwProcessId=0xcc0, dwThreadId=0xcb8)) returned 1 [0115.178] CoTaskMemFree (pv=0x0) [0115.183] GetThreadContext (in: hThread=0x2a8, lpContext=0x2141258 | out: lpContext=0x2141258*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x355000, Edx=0x0, Ecx=0x0, Eax=0x11346c0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0115.184] ReadProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x355008, lpBuffer=0x19f490, nSize=0x4, lpNumberOfBytesRead=0x19f4d4 | out: lpBuffer=0x19f490*, lpNumberOfBytesRead=0x19f4d4*=0x4) returned 1 [0115.184] VirtualAllocEx (hProcess=0x2ac, lpAddress=0x400000, dwSize=0x5e000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0115.188] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x400000, lpBuffer=0x31354f0*, nSize=0x400, lpNumberOfBytesWritten=0x19f4d4 | out: lpBuffer=0x31354f0*, lpNumberOfBytesWritten=0x19f4d4*=0x400) returned 1 [0115.199] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x401000, lpBuffer=0x39c3608*, nSize=0x34000, lpNumberOfBytesWritten=0x19f4d4 | out: lpBuffer=0x39c3608*, lpNumberOfBytesWritten=0x19f4d4*=0x34000) returned 1 [0115.233] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x435000, lpBuffer=0x2141530*, nSize=0xde00, lpNumberOfBytesWritten=0x19f4d4 | out: lpBuffer=0x2141530*, lpNumberOfBytesWritten=0x19f4d4*=0xde00) returned 1 [0115.249] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x443000, lpBuffer=0x214f33c*, nSize=0x1c00, lpNumberOfBytesWritten=0x19f4d4 | out: lpBuffer=0x214f33c*, lpNumberOfBytesWritten=0x19f4d4*=0x1c00) returned 1 [0115.261] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x459000, lpBuffer=0x2150f48*, nSize=0x4a00, lpNumberOfBytesWritten=0x19f4d4 | out: lpBuffer=0x2150f48*, lpNumberOfBytesWritten=0x19f4d4*=0x4a00) returned 1 [0115.272] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x355008, lpBuffer=0x2155954*, nSize=0x4, lpNumberOfBytesWritten=0x19f4d4 | out: lpBuffer=0x2155954*, lpNumberOfBytesWritten=0x19f4d4*=0x4) returned 1 [0115.277] SetThreadContext (hThread=0x2a8, lpContext=0x2141258*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x355000, Edx=0x0, Ecx=0x0, Eax=0x41ff7c, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0115.278] ResumeThread (hThread=0x2a8) returned 0x1 [0115.312] CoGetContextToken (in: pToken=0x19fdc0 | out: pToken=0x19fdc0) returned 0x0 [0115.312] CObjectContext::QueryInterface () returned 0x0 [0115.312] CObjectContext::GetCurrentThreadType () returned 0x0 [0115.313] Release () returned 0x0 [0115.314] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0 [0115.314] CObjectContext::QueryInterface () returned 0x0 [0115.314] CObjectContext::GetCurrentThreadType () returned 0x0 [0115.314] Release () returned 0x0 [0115.314] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0 [0115.314] CObjectContext::QueryInterface () returned 0x0 [0115.314] CObjectContext::GetCurrentThreadType () returned 0x0 [0115.314] Release () returned 0x0 [0115.356] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0 [0115.356] CObjectContext::QueryInterface () returned 0x0 [0115.356] CObjectContext::GetCurrentThreadType () returned 0x0 [0115.356] Release () returned 0x0 [0115.357] CoGetContextToken (in: pToken=0x19faf4 | out: pToken=0x19faf4) returned 0x0 [0115.357] CObjectContext::QueryInterface () returned 0x0 [0115.358] CObjectContext::GetCurrentThreadType () returned 0x0 [0115.358] Release () returned 0x0 [0115.359] CoUninitialize () Thread: id = 2 os_tid = 0x13bc Thread: id = 3 os_tid = 0x13f8 Thread: id = 4 os_tid = 0x13fc [0082.452] CoGetContextToken (in: pToken=0x42cfc74 | out: pToken=0x42cfc74) returned 0x0 [0082.452] CObjectContext::QueryInterface () returned 0x0 [0082.452] CObjectContext::GetCurrentThreadType () returned 0x0 [0082.452] Release () returned 0x0 [0082.452] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0082.452] RoInitialize () returned 0x1 [0082.453] RoUninitialize () returned 0x0 [0115.354] RegCloseKey (hKey=0x80000004) returned 0x0 Thread: id = 5 os_tid = 0x1040 [0107.167] CoGetContextToken (in: pToken=0x47cfd0c | out: pToken=0x47cfd0c) returned 0x0 [0107.168] CObjectContext::QueryInterface () returned 0x0 [0107.168] CObjectContext::GetCurrentThreadType () returned 0x0 [0107.168] Release () returned 0x0 Thread: id = 6 os_tid = 0xd00 Thread: id = 7 os_tid = 0xcc8 Thread: id = 8 os_tid = 0xcc4 Process: id = "2" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe" page_root = "0x70fde000" os_pid = "0xcc0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x139c" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe\"" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 394 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 395 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 396 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 397 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 398 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 399 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 400 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 401 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 402 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 403 start_va = 0x1130000 end_va = 0x1139fff monitored = 0 entry_point = 0x11346c0 region_type = mapped_file name = "cvtres.exe" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe") Region: id = 404 start_va = 0x1140000 end_va = 0x513ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001140000" filename = "" Region: id = 405 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 406 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 407 start_va = 0xfffb0000 end_va = 0xfffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 408 start_va = 0xfffe0000 end_va = 0x7dfa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 409 start_va = 0x7dfa16770000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa16770000" filename = "" Region: id = 410 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 411 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 412 start_va = 0x400000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 413 start_va = 0x460000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 414 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 415 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 416 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 417 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 418 start_va = 0x4d0000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 419 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 420 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 421 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 422 start_va = 0xffeb0000 end_va = 0xfffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000ffeb0000" filename = "" Region: id = 423 start_va = 0x4d0000 end_va = 0x58dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 424 start_va = 0x640000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 425 start_va = 0x740000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 426 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 427 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 428 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 429 start_va = 0x460000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 430 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 431 start_va = 0x740000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 432 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 433 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 434 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 435 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 436 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 437 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 438 start_va = 0x590000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 439 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 440 start_va = 0x5140000 end_va = 0x1cdc4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005140000" filename = "" Region: id = 441 start_va = 0x71560000 end_va = 0x7157afff monitored = 0 entry_point = 0x71569050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 442 start_va = 0x73f90000 end_va = 0x74107fff monitored = 0 entry_point = 0x73fe8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 443 start_va = 0x764c0000 end_va = 0x764cdfff monitored = 0 entry_point = 0x764c5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 444 start_va = 0x71590000 end_va = 0x7179cfff monitored = 0 entry_point = 0x7167acb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 445 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 446 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 447 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 448 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 449 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 450 start_va = 0x930000 end_va = 0xab7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 451 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 452 start_va = 0xac0000 end_va = 0xc40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 453 start_va = 0x1cdd0000 end_va = 0x1e1cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001cdd0000" filename = "" Region: id = 454 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 455 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 456 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 457 start_va = 0x840000 end_va = 0x8d0fff monitored = 0 entry_point = 0x878cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 458 start_va = 0x764d0000 end_va = 0x764d5fff monitored = 0 entry_point = 0x764d1460 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 459 start_va = 0x74eb0000 end_va = 0x762aefff monitored = 0 entry_point = 0x7506b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 460 start_va = 0x76800000 end_va = 0x76836fff monitored = 0 entry_point = 0x76803b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 461 start_va = 0x745b0000 end_va = 0x74aa8fff monitored = 0 entry_point = 0x747b7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 462 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 463 start_va = 0x74520000 end_va = 0x745acfff monitored = 0 entry_point = 0x74569b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 464 start_va = 0x76470000 end_va = 0x764b3fff monitored = 0 entry_point = 0x76477410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 465 start_va = 0x73f20000 end_va = 0x73f2efff monitored = 0 entry_point = 0x73f22e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 466 start_va = 0x6f770000 end_va = 0x6f8aefff monitored = 0 entry_point = 0x6f79d880 region_type = mapped_file name = "dbghelp.dll" filename = "\\Windows\\SysWOW64\\dbghelp.dll" (normalized: "c:\\windows\\syswow64\\dbghelp.dll") Region: id = 467 start_va = 0x1f0000 end_va = 0x1f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 468 start_va = 0x6f600000 end_va = 0x6f76afff monitored = 0 entry_point = 0x6f66e360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 469 start_va = 0x73b80000 end_va = 0x73e4afff monitored = 0 entry_point = 0x73dbc4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 470 start_va = 0xc50000 end_va = 0xf86fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 471 start_va = 0x4a0000 end_va = 0x4a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 472 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 473 start_va = 0x4b0000 end_va = 0x4b0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "counters.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 474 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 475 start_va = 0x620000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 476 start_va = 0x73f30000 end_va = 0x73f8efff monitored = 0 entry_point = 0x73f34af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 477 start_va = 0x71540000 end_va = 0x71551fff monitored = 0 entry_point = 0x71544510 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll") Region: id = 478 start_va = 0x71510000 end_va = 0x7153efff monitored = 0 entry_point = 0x7151bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 479 start_va = 0x71470000 end_va = 0x7150afff monitored = 0 entry_point = 0x714af7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 480 start_va = 0x5a0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 481 start_va = 0xf90000 end_va = 0x108ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 482 start_va = 0x71420000 end_va = 0x7146efff monitored = 0 entry_point = 0x7142d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 483 start_va = 0x71410000 end_va = 0x71417fff monitored = 0 entry_point = 0x71411fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 484 start_va = 0x5e0000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 485 start_va = 0x1e1d0000 end_va = 0x1e2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1d0000" filename = "" Region: id = 486 start_va = 0x76900000 end_va = 0x76906fff monitored = 0 entry_point = 0x76901e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 487 start_va = 0x70a50000 end_va = 0x70ad3fff monitored = 0 entry_point = 0x70a76530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 488 start_va = 0x840000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 489 start_va = 0x1e2d0000 end_va = 0x1e3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e2d0000" filename = "" Region: id = 490 start_va = 0x717a0000 end_va = 0x7191dfff monitored = 0 entry_point = 0x7181c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 491 start_va = 0x630000 end_va = 0x630fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 492 start_va = 0x6fa30000 end_va = 0x6fa37fff monitored = 0 entry_point = 0x6fa31920 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 493 start_va = 0x6f9e0000 end_va = 0x6fa26fff monitored = 0 entry_point = 0x6f9f58d0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 494 start_va = 0x880000 end_va = 0x882fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mswsock.dll.mui") Region: id = 495 start_va = 0x890000 end_va = 0x897fff monitored = 0 entry_point = 0x8919c0 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\SysWOW64\\wshqos.dll" (normalized: "c:\\windows\\syswow64\\wshqos.dll") Region: id = 496 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshqos.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\wshqos.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wshqos.dll.mui") Region: id = 497 start_va = 0x890000 end_va = 0x897fff monitored = 0 entry_point = 0x8919c0 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\SysWOW64\\wshqos.dll" (normalized: "c:\\windows\\syswow64\\wshqos.dll") Region: id = 498 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshqos.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\wshqos.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wshqos.dll.mui") Region: id = 499 start_va = 0x890000 end_va = 0x897fff monitored = 0 entry_point = 0x8919c0 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\SysWOW64\\wshqos.dll" (normalized: "c:\\windows\\syswow64\\wshqos.dll") Region: id = 500 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshqos.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\wshqos.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wshqos.dll.mui") Region: id = 501 start_va = 0x890000 end_va = 0x897fff monitored = 0 entry_point = 0x8919c0 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\SysWOW64\\wshqos.dll" (normalized: "c:\\windows\\syswow64\\wshqos.dll") Region: id = 502 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshqos.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\wshqos.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wshqos.dll.mui") Region: id = 503 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 504 start_va = 0x6f970000 end_va = 0x6f9d3fff monitored = 0 entry_point = 0x6f98afd0 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll") Region: id = 505 start_va = 0x890000 end_va = 0x891fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 506 start_va = 0x6f960000 end_va = 0x6f96ffff monitored = 0 entry_point = 0x6f964600 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\SysWOW64\\mskeyprotect.dll" (normalized: "c:\\windows\\syswow64\\mskeyprotect.dll") Region: id = 507 start_va = 0x6f940000 end_va = 0x6f95ffff monitored = 0 entry_point = 0x6f94d120 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 508 start_va = 0x6f910000 end_va = 0x6f93bfff monitored = 0 entry_point = 0x6f92bb10 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll") Region: id = 509 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 510 start_va = 0x6f8e0000 end_va = 0x6f8e7fff monitored = 0 entry_point = 0x6f8e1d70 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\SysWOW64\\dpapi.dll" (normalized: "c:\\windows\\syswow64\\dpapi.dll") Region: id = 511 start_va = 0x74c00000 end_va = 0x74c41fff monitored = 0 entry_point = 0x74c16f10 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll") Region: id = 512 start_va = 0x71200000 end_va = 0x71212fff monitored = 0 entry_point = 0x71209950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 513 start_va = 0x70230000 end_va = 0x7025efff monitored = 0 entry_point = 0x702495e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 514 start_va = 0x890000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 515 start_va = 0x1e3d0000 end_va = 0x1e4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e3d0000" filename = "" Region: id = 516 start_va = 0x6f8f0000 end_va = 0x6f909fff monitored = 0 entry_point = 0x6f8ffa70 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\SysWOW64\\ncryptsslp.dll" (normalized: "c:\\windows\\syswow64\\ncryptsslp.dll") Region: id = 517 start_va = 0x8d0000 end_va = 0x8d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\crypt32.dll.mui") Region: id = 518 start_va = 0x8e0000 end_va = 0x8e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 519 start_va = 0x8f0000 end_va = 0x8f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 520 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 521 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Thread: id = 9 os_tid = 0xcb8 [0115.380] GetStartupInfoW (in: lpStartupInfo=0x19ff18 | out: lpStartupInfo=0x19ff18*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0115.380] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0115.395] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x920000 [0115.428] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76720000 [0115.429] GetProcAddress (hModule=0x76720000, lpProcName="FlsAlloc") returned 0x7673a980 [0115.429] GetProcAddress (hModule=0x76720000, lpProcName="FlsGetValue") returned 0x76737570 [0115.448] GetProcAddress (hModule=0x76720000, lpProcName="FlsSetValue") returned 0x76739e30 [0115.448] GetProcAddress (hModule=0x76720000, lpProcName="FlsFree") returned 0x76744ff0 [0115.521] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x214) returned 0x9205a8 [0115.521] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76720000 [0115.522] GetCurrentThreadId () returned 0xcb8 [0115.522] GetStartupInfoW (in: lpStartupInfo=0x19feb4 | out: lpStartupInfo=0x19feb4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x425e73, hStdOutput=0x4261ac, hStdError=0x9205a8)) [0115.522] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x800) returned 0x9207c8 [0115.522] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0115.522] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0115.522] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0115.522] SetHandleCount (uNumber=0x20) returned 0x20 [0115.522] GetCommandLineA () returned="\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe\"" [0115.522] GetEnvironmentStringsW () returned 0x643960* [0115.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1293 [0115.530] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x50d) returned 0x920fd0 [0115.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x920fd0, cbMultiByte=1293, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1293 [0115.530] FreeEnvironmentStringsW (penv=0x643960) returned 1 [0115.530] GetLastError () returned 0x0 [0115.530] SetLastError (dwErrCode=0x0) [0115.530] GetLastError () returned 0x0 [0115.531] SetLastError (dwErrCode=0x0) [0115.537] GetLastError () returned 0x0 [0115.537] SetLastError (dwErrCode=0x0) [0115.537] GetACP () returned 0x4e4 [0115.537] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x220) returned 0x9214e8 [0115.538] GetLastError () returned 0x0 [0115.538] SetLastError (dwErrCode=0x0) [0115.538] IsValidCodePage (CodePage=0x4e4) returned 1 [0115.538] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fe7c | out: lpCPInfo=0x19fe7c) returned 1 [0115.538] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f948 | out: lpCPInfo=0x19f948) returned 1 [0115.539] GetLastError () returned 0x0 [0115.539] SetLastError (dwErrCode=0x0) [0115.539] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0115.541] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ왉BĀ") returned 256 [0115.541] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ왉BĀ", cchSrc=256, lpCharType=0x19f95c | out: lpCharType=0x19f95c) returned 1 [0115.542] GetLastError () returned 0x0 [0115.542] SetLastError (dwErrCode=0x0) [0115.542] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0115.542] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0115.542] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0115.542] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0115.542] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x19fc5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x8bhæ¦\x94þ\x19", lpUsedDefaultChar=0x0) returned 256 [0115.542] GetLastError () returned 0x0 [0115.542] SetLastError (dwErrCode=0x0) [0115.542] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0115.543] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd5c, cbMultiByte=256, lpWideCharStr=0x19f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0115.543] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0115.543] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0115.543] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x19fb5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x8bhæ¦\x94þ\x19", lpUsedDefaultChar=0x0) returned 256 [0115.543] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x4458d0, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe")) returned 0x38 [0115.550] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.551] GetLastError () returned 0x0 [0115.551] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.552] GetLastError () returned 0x0 [0115.552] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.553] SetLastError (dwErrCode=0x0) [0115.553] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.554] GetLastError () returned 0x0 [0115.554] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.555] SetLastError (dwErrCode=0x0) [0115.555] GetLastError () returned 0x0 [0115.556] SetLastError (dwErrCode=0x0) [0115.556] GetLastError () returned 0x0 [0115.556] SetLastError (dwErrCode=0x0) [0115.556] GetLastError () returned 0x0 [0115.605] SetLastError (dwErrCode=0x0) [0115.605] GetLastError () returned 0x0 [0115.605] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.606] SetLastError (dwErrCode=0x0) [0115.606] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x41) returned 0x921710 [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.607] SetLastError (dwErrCode=0x0) [0115.607] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.608] GetLastError () returned 0x0 [0115.608] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.609] SetLastError (dwErrCode=0x0) [0115.609] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.610] SetLastError (dwErrCode=0x0) [0115.610] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.611] GetLastError () returned 0x0 [0115.611] SetLastError (dwErrCode=0x0) [0115.612] GetLastError () returned 0x0 [0115.612] SetLastError (dwErrCode=0x0) [0115.612] GetLastError () returned 0x0 [0115.612] SetLastError (dwErrCode=0x0) [0115.612] GetLastError () returned 0x0 [0115.612] SetLastError (dwErrCode=0x0) [0115.612] GetLastError () returned 0x0 [0115.612] SetLastError (dwErrCode=0x0) [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x90) returned 0x921760 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x1f) returned 0x9217f8 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x2e) returned 0x921820 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x37) returned 0x921858 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x3c) returned 0x921898 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x31) returned 0x9218e0 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x14) returned 0x921920 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x24) returned 0x921940 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd) returned 0x921970 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x1d) returned 0x921988 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x31) returned 0x9219b0 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x15) returned 0x9219f0 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x17) returned 0x921a10 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xe) returned 0x921a30 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x69) returned 0x921a48 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x3e) returned 0x921ac0 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x1b) returned 0x921b08 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x1d) returned 0x921b30 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x48) returned 0x921b58 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x12) returned 0x921ba8 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x18) returned 0x921bc8 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x1b) returned 0x921be8 [0115.618] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x24) returned 0x921c10 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x29) returned 0x921c40 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x1e) returned 0x921c78 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x6b) returned 0x921ca0 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x17) returned 0x921d18 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xf) returned 0x921d38 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x16) returned 0x921d50 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x2a) returned 0x921d70 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x29) returned 0x921da8 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x12) returned 0x921de0 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x21) returned 0x921e00 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x16) returned 0x921e30 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x22) returned 0x921e50 [0115.619] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x12) returned 0x921e80 [0115.632] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x920fd0 | out: hHeap=0x920000) returned 1 [0115.677] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x80) returned 0x921ea0 [0115.677] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x800) returned 0x921f28 [0115.678] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0115.678] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.678] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x428bdb) returned 0x0 [0115.678] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.688] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.689] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.689] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.689] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.690] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.690] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.690] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.691] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.691] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.746] RtlSizeHeap (HeapHandle=0x920000, Flags=0x0, MemoryPointer=0x921ea0) returned 0x80 [0115.746] GetLastError () returned 0x0 [0115.746] SetLastError (dwErrCode=0x0) [0115.746] GetLastError () returned 0x0 [0115.746] SetLastError (dwErrCode=0x0) [0115.746] GetLastError () returned 0x0 [0115.746] SetLastError (dwErrCode=0x0) [0115.746] GetLastError () returned 0x0 [0115.746] SetLastError (dwErrCode=0x0) [0115.746] GetLastError () returned 0x0 [0115.746] SetLastError (dwErrCode=0x0) [0115.746] GetLastError () returned 0x0 [0115.746] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.747] SetLastError (dwErrCode=0x0) [0115.747] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.748] SetLastError (dwErrCode=0x0) [0115.748] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.749] SetLastError (dwErrCode=0x0) [0115.749] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.750] GetLastError () returned 0x0 [0115.750] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.751] SetLastError (dwErrCode=0x0) [0115.751] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.752] SetLastError (dwErrCode=0x0) [0115.752] GetLastError () returned 0x0 [0115.753] SetLastError (dwErrCode=0x0) [0115.763] Sleep (dwMilliseconds=0x10) [0115.820] Sleep (dwMilliseconds=0x10) [0115.838] Sleep (dwMilliseconds=0x10) [0115.881] Sleep (dwMilliseconds=0x10) [0115.916] Sleep (dwMilliseconds=0x10) [0115.953] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.953] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.953] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.953] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x642830 [0115.953] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.953] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.953] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.953] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.953] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.953] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.953] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.954] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.954] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.954] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.954] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.954] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.954] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.954] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.954] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.954] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.954] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.954] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.954] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.954] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.954] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.954] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.954] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.955] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0115.955] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0115.955] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0115.955] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0115.955] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.955] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.955] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.955] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x642840 [0115.955] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.955] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.955] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.955] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.955] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.955] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.955] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.955] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.955] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.955] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.955] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0115.956] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0115.957] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0115.957] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0115.957] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0115.957] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.957] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.957] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.957] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x642850 [0115.957] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.957] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.957] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.957] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.957] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.957] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.957] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.957] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.957] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.957] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.957] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.957] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.957] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.957] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.957] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.957] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0115.958] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000000000" [0115.959] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.959] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.959] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.959] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x642758 [0115.960] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.960] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.960] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.960] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.960] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.960] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.960] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.960] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.960] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.960] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.960] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.960] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.960] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.960] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.960] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.960] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.960] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.960] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.960] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.960] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.960] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.960] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.960] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.961] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0115.961] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.961] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.961] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.961] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x642770 [0115.961] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.962] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.962] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.962] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.962] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.962] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.962] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.962] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.962] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.962] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.962] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.962] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.962] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.962] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.962] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.962] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.962] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.962] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.962] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.962] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.962] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.963] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.963] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.963] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0115.963] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000000000" [0115.964] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000000000000000000000" [0115.965] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.965] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.965] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.965] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x642788 [0115.965] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.965] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.965] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.965] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.965] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.965] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.965] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.965] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.965] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.965] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.965] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.965] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.965] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.966] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.966] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.966] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.966] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.966] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.966] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.966] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.966] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.966] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.966] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.966] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.966] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.966] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.966] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.966] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.966] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.966] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0115.966] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0115.966] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0115.966] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x642798 [0115.966] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.966] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.967] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.967] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.967] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.967] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.967] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0115.967] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0115.967] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0115.967] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0115.967] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0115.967] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0115.967] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0115.967] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0115.967] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0115.967] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0115.967] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0115.967] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0115.967] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0115.967] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0115.967] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0115.967] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0115.967] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0115.967] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0115.967] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0115.968] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0115.968] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x6427b0 [0115.968] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.968] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.968] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.968] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.968] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.968] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.968] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x642518 [0115.968] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.968] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.968] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.968] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.968] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.969] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.969] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x642538 [0115.969] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.969] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.969] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.969] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.969] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.969] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.969] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x642558 [0115.969] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.969] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.969] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.969] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.969] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.969] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.969] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x642570 [0115.969] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.969] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.969] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.969] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.969] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.969] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.970] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x643da8 [0115.970] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.970] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.970] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.970] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.970] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.970] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.970] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x643dc0 [0115.970] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.970] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.970] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.970] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.970] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.970] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.970] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x643dd8 [0115.970] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.970] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.970] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.970] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.970] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.970] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.970] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x643df8 [0115.971] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.971] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.971] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.971] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.971] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.971] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.971] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x643e10 [0115.971] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.971] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.971] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.971] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.971] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.971] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.971] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x643e28 [0115.971] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0115.971] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0115.971] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0115.971] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0115.971] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0115.971] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0115.981] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76720000 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="LoadLibraryA") returned 0x76744bf0 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="GetProcAddress") returned 0x767378b0 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="lstrcatA") returned 0x7673f640 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="Sleep") returned 0x76737990 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="GetSystemTime") returned 0x76744940 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="ExitProcess") returned 0x76747b30 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="GetCurrentProcess") returned 0x767338c0 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="VirtualAllocExNuma") returned 0x76762710 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="VirtualAlloc") returned 0x76737810 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="VirtualFree") returned 0x76737600 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="lstrcmpiW") returned 0x76737590 [0115.982] GetProcAddress (hModule=0x76720000, lpProcName="LocalAlloc") returned 0x76737a30 [0115.983] GetProcAddress (hModule=0x76720000, lpProcName="GetComputerNameA") returned 0x7673fbf0 [0115.983] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x76600000 [0116.117] GetProcAddress (hModule=0x76600000, lpProcName="GetUserNameA") returned 0x76622910 [0116.117] Sleep (dwMilliseconds=0x13) [0116.167] Sleep (dwMilliseconds=0x13) [0116.198] Sleep (dwMilliseconds=0x13) [0116.228] Sleep (dwMilliseconds=0x13) [0116.259] Sleep (dwMilliseconds=0x13) [0116.290] Sleep (dwMilliseconds=0x13) [0116.322] Sleep (dwMilliseconds=0x13) [0116.353] Sleep (dwMilliseconds=0x13) [0116.384] Sleep (dwMilliseconds=0x13) [0116.411] Sleep (dwMilliseconds=0x13) [0116.433] Sleep (dwMilliseconds=0x13) [0116.463] Sleep (dwMilliseconds=0x13) [0116.495] Sleep (dwMilliseconds=0x13) [0116.525] Sleep (dwMilliseconds=0x13) [0116.556] Sleep (dwMilliseconds=0x13) [0116.587] Sleep (dwMilliseconds=0x13) [0116.619] Sleep (dwMilliseconds=0x13) [0116.650] Sleep (dwMilliseconds=0x13) [0116.768] GetComputerNameA (in: lpBuffer=0x197dd0, nSize=0x197dcc | out: lpBuffer="XC64ZB", nSize=0x197dcc) returned 1 [0116.769] Sleep (dwMilliseconds=0x13) [0116.808] Sleep (dwMilliseconds=0x13) [0116.842] Sleep (dwMilliseconds=0x13) [0116.871] Sleep (dwMilliseconds=0x13) [0116.900] Sleep (dwMilliseconds=0x13) [0116.932] Sleep (dwMilliseconds=0x13) [0116.953] Sleep (dwMilliseconds=0x13) [0116.978] Sleep (dwMilliseconds=0x13) [0117.009] Sleep (dwMilliseconds=0x13) [0117.042] Sleep (dwMilliseconds=0x13) [0117.072] Sleep (dwMilliseconds=0x13) [0117.103] Sleep (dwMilliseconds=0x13) [0117.141] Sleep (dwMilliseconds=0x13) [0117.205] Sleep (dwMilliseconds=0x13) [0117.228] Sleep (dwMilliseconds=0x13) [0117.259] Sleep (dwMilliseconds=0x13) [0117.291] GetComputerNameA (in: lpBuffer=0x197dd0, nSize=0x197dcc | out: lpBuffer="XC64ZB", nSize=0x197dcc) returned 1 [0117.291] Sleep (dwMilliseconds=0x13) [0117.322] Sleep (dwMilliseconds=0x13) [0117.354] GetComputerNameA (in: lpBuffer=0x197dd0, nSize=0x197dcc | out: lpBuffer="XC64ZB", nSize=0x197dcc) returned 1 [0117.354] Sleep (dwMilliseconds=0x13) [0117.386] Sleep (dwMilliseconds=0x13) [0117.422] GetCurrentProcess () returned 0xffffffff [0117.422] VirtualAllocExNuma (hProcess=0xffffffff, lpAddress=0x0, dwSize=0x7d0, flAllocationType=0x3000, flProtect=0x40, nndPreferred=0x0) returned 0x30000 [0117.422] VirtualAlloc (lpAddress=0x0, dwSize=0x17c841c0, flAllocationType=0x3000, flProtect=0x4) returned 0x5140000 [0119.463] VirtualFree (lpAddress=0x5140000, dwSize=0x17c841c0, dwFreeType=0x8000) returned 0 [0119.464] Sleep (dwMilliseconds=0x13) [0119.497] Sleep (dwMilliseconds=0x13) [0119.529] Sleep (dwMilliseconds=0x13) [0119.562] Sleep (dwMilliseconds=0x13) [0119.591] Sleep (dwMilliseconds=0x13) [0119.625] Sleep (dwMilliseconds=0x13) [0119.762] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.762] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.762] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.762] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x640598 [0119.763] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.763] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.763] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.763] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.763] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.763] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.763] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.763] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.763] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.763] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.763] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.763] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.763] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.763] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.763] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.763] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.763] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.763] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.763] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.763] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.763] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.763] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.763] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.763] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.764] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.766] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.766] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.766] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.766] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x642588 [0119.766] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.766] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.766] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.766] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.766] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.766] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.766] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.766] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.766] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.766] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.766] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.766] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.766] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.766] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.766] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.766] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.766] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.766] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.767] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.767] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.767] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.767] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.767] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.767] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.768] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.768] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x647268 [0119.768] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.768] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.768] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.768] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.768] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.768] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.768] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.768] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.768] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.768] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.768] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.768] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.768] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.768] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.768] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.768] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.768] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0119.769] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0119.770] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.770] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.770] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.770] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x6471f0 [0119.770] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.770] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.770] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.770] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.770] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.770] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.770] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.770] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.770] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.770] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.770] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.770] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.770] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.770] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.770] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.770] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.770] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.770] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.770] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000" [0119.771] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000" [0119.772] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.772] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.772] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.772] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x6471c0 [0119.772] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.772] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.772] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.772] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.772] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.772] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.772] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.772] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.772] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.772] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.772] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.772] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.772] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.772] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.772] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.772] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.772] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.772] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.772] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.772] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.772] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.772] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.772] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.772] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.772] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.772] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000000000" [0119.773] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.773] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.773] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.774] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x647220 [0119.774] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.774] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.774] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.774] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.774] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.774] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.774] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.774] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.774] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.774] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.774] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.774] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.774] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.774] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.774] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.774] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.774] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.774] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.774] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.774] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.774] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.774] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.774] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.774] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.774] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.774] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.774] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.774] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0119.775] lstrcatA (in: lpString1="", lpString2="0" | out: lpString1="0") returned="0" [0119.775] lstrcatA (in: lpString1="0", lpString2="0" | out: lpString1="00") returned="00" [0119.775] lstrcatA (in: lpString1="00", lpString2="0" | out: lpString1="000") returned="000" [0119.775] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x647748 [0119.775] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.775] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.775] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.775] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.775] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.775] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.775] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.775] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.775] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.775] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.775] lstrcatA (in: lpString1="0000000000000", lpString2="0" | out: lpString1="00000000000000") returned="00000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000", lpString2="0" | out: lpString1="000000000000000") returned="000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000", lpString2="0" | out: lpString1="0000000000000000") returned="0000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000", lpString2="0" | out: lpString1="00000000000000000") returned="00000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000", lpString2="0" | out: lpString1="000000000000000000") returned="000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000", lpString2="0" | out: lpString1="0000000000000000000") returned="0000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000", lpString2="0" | out: lpString1="00000000000000000000") returned="00000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000", lpString2="0" | out: lpString1="000000000000000000000") returned="000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000") returned="0000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000") returned="00000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000") returned="000000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000") returned="0000000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000") returned="00000000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000") returned="000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000") returned="0000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000") returned="00000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000") returned="000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000") returned="0000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000") returned="00000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000") returned="000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000") returned="0000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000") returned="00000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000") returned="000000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000") returned="0000000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000") returned="00000000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="0000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000" [0119.776] lstrcatA (in: lpString1="00000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000" [0119.777] lstrcatA (in: lpString1="000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000" [0119.777] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000" [0119.777] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000" [0119.777] lstrcatA (in: lpString1="000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="0000000000000000000000000000000000000000000000") returned="0000000000000000000000000000000000000000000000" [0119.777] lstrcatA (in: lpString1="0000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="00000000000000000000000000000000000000000000000") returned="00000000000000000000000000000000000000000000000" [0119.777] lstrcatA (in: lpString1="00000000000000000000000000000000000000000000000", lpString2="0" | out: lpString1="000000000000000000000000000000000000000000000000") returned="000000000000000000000000000000000000000000000000" [0119.777] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x647208 [0119.777] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.777] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.777] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.777] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.777] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.777] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.777] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.777] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.777] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.777] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.777] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x647c48 [0119.777] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.777] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.777] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.777] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.777] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.777] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.777] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.777] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.777] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.778] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.778] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x647c68 [0119.778] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.778] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.778] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.778] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.778] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.778] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.778] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.778] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.778] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.778] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.778] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x6471d8 [0119.778] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.778] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.778] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.778] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.792] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.792] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.792] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.792] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.792] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.792] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.792] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x647a30 [0119.792] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.792] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.792] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.792] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.792] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.793] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.793] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.793] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.793] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.793] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.793] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x647078 [0119.793] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.793] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.793] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.793] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.793] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.793] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.793] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.793] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.793] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.793] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.793] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x647098 [0119.793] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.793] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.793] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.793] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.793] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.794] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.794] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.794] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.794] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.794] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.794] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x647160 [0119.794] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.794] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.794] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.794] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.794] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.794] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.794] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.794] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.794] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.794] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.794] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x647238 [0119.794] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.794] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.794] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.794] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.794] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.795] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.795] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.795] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.795] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.795] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.795] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x647118 [0119.795] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.795] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.795] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.795] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.795] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.795] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.795] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.795] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.795] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.795] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.795] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x647298 [0119.795] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.795] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.795] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.795] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.795] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.795] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.795] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.795] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.795] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.795] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.795] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x6470b8 [0119.796] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.796] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.796] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.796] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.796] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.796] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.796] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.796] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.796] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.796] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.796] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x6472b0 [0119.796] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.796] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.796] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.796] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.796] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.796] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.796] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.796] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.796] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.796] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.796] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x647130 [0119.796] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.796] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.796] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.796] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.796] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.797] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.797] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.797] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.797] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.797] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.797] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x647148 [0119.797] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.797] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.797] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.797] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.797] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.797] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.797] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.797] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.797] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.797] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.797] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x643e40 [0119.797] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.797] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.797] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.797] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.797] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.797] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.797] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.797] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.797] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.797] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.798] LocalAlloc (uFlags=0x40, uBytes=0x5) returned 0x647a50 [0119.798] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.798] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.798] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.798] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.798] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.798] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.798] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.798] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.798] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.798] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.798] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x643e60 [0119.798] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.798] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.798] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.798] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.798] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.798] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.798] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.798] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.798] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.798] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.798] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x643e80 [0119.798] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.798] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.798] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.798] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.798] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.798] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.799] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.799] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.799] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.799] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.799] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x647768 [0119.799] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.799] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.799] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.799] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.799] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.799] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.799] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.799] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.799] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.799] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.799] LocalAlloc (uFlags=0x40, uBytes=0x1f) returned 0x643ea0 [0119.799] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.799] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.799] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.799] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.799] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.799] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.799] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.799] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.799] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.799] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.799] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x647190 [0119.799] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.800] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.800] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.800] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.800] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.800] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.800] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.800] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.800] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.800] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.800] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x6480e8 [0119.800] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.800] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.800] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.800] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.800] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.800] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.800] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.800] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.800] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.800] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.800] LocalAlloc (uFlags=0x40, uBytes=0x5) returned 0x643ec8 [0119.800] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.800] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.800] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.800] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.800] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.800] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.800] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.800] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.801] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.801] lstrcatA (in: lpString1="000000000000", lpString2="0" | out: lpString1="0000000000000") returned="0000000000000" [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x643ed8 [0119.801] lstrcatA (in: lpString1="000", lpString2="0" | out: lpString1="0000") returned="0000" [0119.801] lstrcatA (in: lpString1="0000", lpString2="0" | out: lpString1="00000") returned="00000" [0119.801] lstrcatA (in: lpString1="00000", lpString2="0" | out: lpString1="000000") returned="000000" [0119.801] lstrcatA (in: lpString1="000000", lpString2="0" | out: lpString1="0000000") returned="0000000" [0119.801] lstrcatA (in: lpString1="0000000", lpString2="0" | out: lpString1="00000000") returned="00000000" [0119.801] lstrcatA (in: lpString1="00000000", lpString2="0" | out: lpString1="000000000") returned="000000000" [0119.801] lstrcatA (in: lpString1="000000000", lpString2="0" | out: lpString1="0000000000") returned="0000000000" [0119.801] lstrcatA (in: lpString1="0000000000", lpString2="0" | out: lpString1="00000000000") returned="00000000000" [0119.801] lstrcatA (in: lpString1="00000000000", lpString2="0" | out: lpString1="000000000000") returned="000000000000" [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6471a8 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x647ed0 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x647ee0 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x6487b8 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x6487d0 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x647ef0 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x647f00 [0119.801] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x6487a0 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x648830 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x6487e8 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x647f28 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x648848 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x648800 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x5) returned 0x647f58 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x648818 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x648860 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x647cc8 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x648578 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x648500 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x6486e0 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x648548 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x647f68 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x6485d8 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x648590 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x6484b8 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x648608 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x6485a8 [0119.802] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648a70 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x648950 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x648a40 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x6484d0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x6488a0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x648620 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x6485c0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x6485f0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x6488e0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x6486c8 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x6486f8 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x6484a0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x6484e8 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x647cf0 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x647d10 [0119.803] LocalAlloc (uFlags=0x40, uBytes=0x5) returned 0x6489c0 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x3e) returned 0x647d30 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x6478a8 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x6478d8 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x2b) returned 0x647940 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x648d88 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x75) returned 0x646e68 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x2d) returned 0x646ee8 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x648960 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x6489a0 [0119.804] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x648a30 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x647d78 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648d28 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x648518 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x1b) returned 0x646f20 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x648530 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x2b) returned 0x647ab0 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x648710 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x647ae8 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x648728 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x648c68 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x6488d0 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x648da8 [0119.805] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648920 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x648d08 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x648788 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x647b10 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x648aa8 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x647b38 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x6488b0 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x648be8 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x6489b0 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x1b) returned 0x647b68 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x648740 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x648e68 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x648560 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648d48 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x648638 [0119.806] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x648c08 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x648758 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x648a50 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648a60 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x648dc8 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x648770 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x1b) returned 0x648e88 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x648650 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x1f) returned 0x648eb0 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x648668 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x648ed8 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648a20 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x648f00 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x648910 [0119.807] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x648f28 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x648680 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x6488c0 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0x5) returned 0x648a10 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648900 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x648698 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x6486b0 [0119.808] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x649120 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x649138 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x6490f0 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0x1d) returned 0x649360 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648ac8 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x649388 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x648ae8 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0x1b) returned 0x6493b0 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x649240 [0119.809] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x6490c0 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x648e08 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x648d68 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x648de8 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x6490d8 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x649108 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x648cc8 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x649060 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x648b48 [0119.814] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x648f88 [0119.815] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x648fb8 [0119.815] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648c88 [0119.815] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x649030 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x649048 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x649258 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x6491e0 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x649150 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x648b68 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x648fa0 [0119.825] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x648ca8 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648b08 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648ba8 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648e48 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648b28 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x6490a8 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x648e28 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x649078 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x648b88 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x648bc8 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x648c28 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x648c48 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x648ce8 [0119.826] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x649090 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x6488f0 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x648fd0 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x649270 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x648fe8 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x649b28 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x6499c8 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x649168 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x649948 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x649000 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x6498c8 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x649180 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648930 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x649198 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x649a48 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x6499e8 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x649a88 [0119.827] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x649b48 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x649848 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649be0 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x6491b0 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649c10 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x6491c8 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649c40 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x649808 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649c70 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x6489d0 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649ca0 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x6491f8 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649cd0 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x649018 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649d00 [0119.828] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x649210 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649d30 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x6489f0 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649d60 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x649228 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649e48 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x6492a0 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649f98 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x6492e8 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649e78 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x6489e0 [0119.829] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649ed8 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x648940 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649de8 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648970 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649fc8 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x649330 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649f08 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x649300 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649e18 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x648980 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649ff8 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x649288 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x64a118 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6492d0 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x64a058 [0119.830] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x6492b8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x64a148 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x648990 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649f38 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x648a00 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649ea8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x649348 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x64a088 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x649318 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649db8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x64a3c8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x64a0b8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x64a4e8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x64a0e8 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x64a528 [0119.831] LocalAlloc (uFlags=0x40, uBytes=0x21) returned 0x649f68 [0119.832] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x64a6a8 [0119.836] LoadLibraryA (lpLibFileName="BCRYPT.DLL") returned 0x71560000 [0119.849] LoadLibraryA (lpLibFileName="CRYPT32.DLL") returned 0x73f90000 [0120.747] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x71590000 [0121.661] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x74ab0000 [0121.661] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0121.678] LoadLibraryA (lpLibFileName="user32.dll") returned 0x743d0000 [0121.679] LoadLibraryA (lpLibFileName="psapi.dll") returned 0x764d0000 [0121.763] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x74eb0000 [0127.887] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x76d00000 [0127.887] LoadLibraryA (lpLibFileName="dbghelp.dll") returned 0x6f770000 [0128.558] LoadLibraryA (lpLibFileName="gdiplus.dll") returned 0x6f600000 [0129.209] GetProcAddress (hModule=0x71560000, lpProcName="BCryptCloseAlgorithmProvider") returned 0x71563c50 [0129.209] GetProcAddress (hModule=0x71560000, lpProcName="BCryptDestroyKey") returned 0x71566420 [0129.209] GetProcAddress (hModule=0x71560000, lpProcName="BCryptOpenAlgorithmProvider") returned 0x71563760 [0129.209] GetProcAddress (hModule=0x71560000, lpProcName="BCryptSetProperty") returned 0x715647e0 [0129.210] GetProcAddress (hModule=0x71560000, lpProcName="BCryptGenerateSymmetricKey") returned 0x71564910 [0129.210] GetProcAddress (hModule=0x71560000, lpProcName="BCryptDecrypt") returned 0x71564ff0 [0129.210] GetProcAddress (hModule=0x73f90000, lpProcName="CryptUnprotectData") returned 0x73fb3140 [0129.210] GetProcAddress (hModule=0x73f90000, lpProcName="CryptBinaryToStringA") returned 0x73fae0f0 [0129.211] GetProcAddress (hModule=0x73f90000, lpProcName="CryptStringToBinaryA") returned 0x73fad6d0 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegOpenKeyExA") returned 0x7661f790 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegQueryValueExA") returned 0x7661f500 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegCloseKey") returned 0x7661f620 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegOpenKeyExW") returned 0x7661f350 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegGetValueW") returned 0x76620670 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegEnumKeyExA") returned 0x76621810 [0129.211] GetProcAddress (hModule=0x76600000, lpProcName="RegGetValueA") returned 0x76621060 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="GetUserNameA") returned 0x76622910 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="GetCurrentHwProfileA") returned 0x76633a60 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="RegEnumValueA") returned 0x76621e70 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="GetFileSecurityA") returned 0x76634060 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="OpenProcessToken") returned 0x7661f520 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="DuplicateToken") returned 0x76621140 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="MapGenericMask") returned 0x766238c0 [0129.212] GetProcAddress (hModule=0x76600000, lpProcName="AccessCheck") returned 0x76621230 [0129.213] GetProcAddress (hModule=0x71590000, lpProcName="InternetCloseHandle") returned 0x7165d200 [0129.213] GetProcAddress (hModule=0x71590000, lpProcName="InternetReadFile") returned 0x71617320 [0129.213] GetProcAddress (hModule=0x71590000, lpProcName="HttpSendRequestA") returned 0x71658e60 [0129.213] GetProcAddress (hModule=0x71590000, lpProcName="HttpOpenRequestA") returned 0x716f5860 [0129.213] GetProcAddress (hModule=0x71590000, lpProcName="InternetConnectA") returned 0x716d0da0 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="InternetOpenA") returned 0x716585d0 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="HttpAddRequestHeadersA") returned 0x7160c3f0 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="HttpQueryInfoA") returned 0x71631880 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="InternetSetFilePointer") returned 0x716d10c0 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="InternetOpenUrlA") returned 0x715da6c0 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="InternetSetOptionA") returned 0x71631dc0 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="DeleteUrlCacheEntry") returned 0x71652080 [0129.214] GetProcAddress (hModule=0x71590000, lpProcName="InternetCrackUrlA") returned 0x7166f730 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="CreateCompatibleBitmap") returned 0x74b32390 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="SelectObject") returned 0x74b30440 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="BitBlt") returned 0x74b32230 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="DeleteObject") returned 0x74b30810 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="CreateDCA") returned 0x74b33d70 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="GetDeviceCaps") returned 0x74b30fe0 [0129.215] GetProcAddress (hModule=0x74ab0000, lpProcName="CreateCompatibleDC") returned 0x74b32050 [0129.215] GetProcAddress (hModule=0x74dc0000, lpProcName="CoCreateInstance") returned 0x76330060 [0129.216] GetProcAddress (hModule=0x74dc0000, lpProcName="CoUninitialize") returned 0x763092a0 [0129.216] GetProcAddress (hModule=0x74dc0000, lpProcName="CoInitialize") returned 0x74df1930 [0129.216] GetProcAddress (hModule=0x74dc0000, lpProcName="CreateStreamOnHGlobal") returned 0x76361370 [0129.217] GetProcAddress (hModule=0x74dc0000, lpProcName="GetHGlobalFromStream") returned 0x76361a60 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="GetDesktopWindow") returned 0x743e3470 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="ReleaseDC") returned 0x743eba40 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="GetKeyboardLayoutList") returned 0x74408e70 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="CharToOemA") returned 0x74452cf0 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="GetDC") returned 0x74408990 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="wsprintfA") returned 0x744004a0 [0129.217] GetProcAddress (hModule=0x743d0000, lpProcName="EnumDisplayDevicesA") returned 0x743e3250 [0129.218] GetProcAddress (hModule=0x743d0000, lpProcName="GetSystemMetrics") returned 0x743e9160 [0129.218] GetProcAddress (hModule=0x743d0000, lpProcName="GetWindowRect") returned 0x743e4140 [0129.218] GetProcAddress (hModule=0x743d0000, lpProcName="GetWindowDC") returned 0x74408f20 [0129.218] GetProcAddress (hModule=0x743d0000, lpProcName="CloseWindow") returned 0x7442bb50 [0129.218] GetProcAddress (hModule=0x764d0000, lpProcName="GetModuleFileNameExA") returned 0x764d1660 [0129.218] GetProcAddress (hModule=0x764d0000, lpProcName="GetModuleBaseNameA") returned 0x764d1640 [0129.218] GetProcAddress (hModule=0x764d0000, lpProcName="EnumProcessModules") returned 0x764d1360 [0129.218] GetProcAddress (hModule=0x74eb0000, lpProcName="ShellExecuteExA") returned 0x75120290 [0129.219] GetProcAddress (hModule=0x74eb0000, lpProcName="SHFileOperationA") returned 0x7510f680 [0129.219] GetProcAddress (hModule=0x74eb0000, lpProcName="SHGetFolderPathA") returned 0x75069b10 [0129.219] GetProcAddress (hModule=0x76d00000, lpProcName="PathMatchSpecW") returned 0x76d22c80 [0129.219] GetProcAddress (hModule=0x76d00000, lpProcName="PathMatchSpecA") returned 0x76d22c20 [0129.220] GetProcAddress (hModule=0x76d00000, lpProcName="StrCmpCA") returned 0x76d23330 [0129.220] GetProcAddress (hModule=0x76d00000, lpProcName="StrCmpCW") returned 0x76d14c20 [0129.220] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrA") returned 0x76d23570 [0129.220] GetProcAddress (hModule=0x76d00000, lpProcName="PathFindFileNameA") returned 0x76d18780 [0129.220] GetProcAddress (hModule=0x6f770000, lpProcName="SymMatchString") returned 0x6f852890 [0129.220] GetProcAddress (hModule=0x6f600000, lpProcName="GdipGetImageEncodersSize") returned 0x6f65f520 [0129.220] GetProcAddress (hModule=0x6f600000, lpProcName="GdipGetImageEncoders") returned 0x6f65f380 [0129.220] GetProcAddress (hModule=0x6f600000, lpProcName="GdipCreateBitmapFromHBITMAP") returned 0x6f645b70 [0129.220] GetProcAddress (hModule=0x6f600000, lpProcName="GdiplusStartup") returned 0x6f66ab50 [0129.221] GetProcAddress (hModule=0x6f600000, lpProcName="GdiplusShutdown") returned 0x6f66a7c0 [0129.221] GetProcAddress (hModule=0x6f600000, lpProcName="GdipSaveImageToStream") returned 0x6f664bd0 [0129.221] GetProcAddress (hModule=0x6f600000, lpProcName="GdipDisposeImage") returned 0x6f6691c0 [0129.221] GetProcAddress (hModule=0x6f600000, lpProcName="GdipFree") returned 0x6f643810 [0129.253] GetWindowsDirectoryA (in: lpBuffer=0x19f3f4, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0129.253] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x19f328, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f328*=0xc287f38, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0129.305] GetProcessHeap () returned 0x640000 [0129.305] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x104) returned 0x652db8 [0129.305] wsprintfA (in: param_1=0x652db8, param_2="%08lX%04lX%lu-" | out: param_1="D5DBAA177EAC3343412148-") returned 23 [0129.308] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x920fd0 [0129.311] GetCurrentHwProfileA (in: lpHwProfileInfo=0x19f288 | out: lpHwProfileInfo=0x19f288) returned 1 [0129.313] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x920ff8 [0129.313] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921030 [0129.315] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f0fc | out: phkResult=0x19f0fc*=0x188) returned 0x0 [0129.316] RegQueryValueExA (in: hKey=0x188, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x0, lpData=0x19f204, lpcbData=0x19f100*=0xff | out: lpType=0x0, lpData=0x19f204*=0x30, lpcbData=0x19f100*=0x25) returned 0x0 [0129.316] RegCloseKey (hKey=0x188) returned 0x0 [0129.317] CharToOemA (in: pSrc="03845cb8-7441-4a2f-8c0f-c90408af5778", pDst=0x19f104 | out: pDst="03845cb8-7441-4a2f-8c0f-c90408af5778") returned 1 [0129.317] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921058 [0129.317] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921090 [0129.317] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210b8 [0129.318] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921090 | out: hHeap=0x920000) returned 1 [0129.318] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x50) returned 0x9210f0 [0129.318] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210b8 | out: hHeap=0x920000) returned 1 [0129.318] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x920fd0 | out: hHeap=0x920000) returned 1 [0129.318] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921058 | out: hHeap=0x920000) returned 1 [0129.319] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921030 | out: hHeap=0x920000) returned 1 [0129.319] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x920ff8 | out: hHeap=0x920000) returned 1 [0129.319] lstrcatA (in: lpString1="", lpString2="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963" | out: lpString1="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963") returned="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963" [0129.319] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210f0 | out: hHeap=0x920000) returned 1 [0129.319] GetCurrentHwProfileA (in: lpHwProfileInfo=0x19f48c | out: lpHwProfileInfo=0x19f48c) returned 1 [0129.320] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x920fd0 [0129.320] lstrcatA (in: lpString1="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963", lpString2="{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}" | out: lpString1="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}") returned="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}" [0129.320] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x920fd0 | out: hHeap=0x920000) returned 1 [0129.320] GetSystemInfo (in: lpSystemInfo=0x19f4b8 | out: lpSystemInfo=0x19f4b8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0129.320] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x4) returned 0x920fd0 [0129.320] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x920fe0 [0129.321] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x921008 [0129.321] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921008 | out: hHeap=0x920000) returned 1 [0129.321] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x921008 [0129.329] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x18) returned 0x921018 [0129.346] GetLastError () returned 0x7e [0129.346] SetLastError (dwErrCode=0x7e) [0129.346] GetLastError () returned 0x7e [0129.346] SetLastError (dwErrCode=0x7e) [0129.357] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921038 [0129.357] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x921118 [0129.366] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921118 | out: hHeap=0x920000) returned 1 [0129.367] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x921118 [0129.367] GetLastError () returned 0x7e [0129.367] SetLastError (dwErrCode=0x7e) [0129.367] GetLastError () returned 0x7e [0129.367] SetLastError (dwErrCode=0x7e) [0129.367] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921128 [0129.367] GetLastError () returned 0x7e [0129.367] SetLastError (dwErrCode=0x7e) [0129.367] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922730 [0129.368] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.369] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0129.369] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x921038 [0129.369] GetLastError () returned 0x7e [0129.369] SetLastError (dwErrCode=0x7e) [0129.369] GetLastError () returned 0x7e [0129.369] SetLastError (dwErrCode=0x7e) [0129.369] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0x200) returned 0x921208 [0129.369] GetLastError () returned 0x7e [0129.369] SetLastError (dwErrCode=0x7e) [0129.378] GetLastError () returned 0x7e [0129.378] SetLastError (dwErrCode=0x7e) [0129.378] GetLastError () returned 0x7e [0129.378] SetLastError (dwErrCode=0x7e) [0129.378] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x922730 [0129.381] GetLastError () returned 0x7e [0129.381] SetLastError (dwErrCode=0x7e) [0129.381] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922810 [0129.381] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922810 | out: hHeap=0x920000) returned 1 [0129.382] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921128 | out: hHeap=0x920000) returned 1 [0129.382] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0129.383] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921118 | out: hHeap=0x920000) returned 1 [0129.383] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x8) returned 0x921410 [0129.390] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x18) returned 0x921420 [0129.390] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x4) returned 0x921440 [0129.394] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x10) returned 0x921450 [0129.406] GetLastError () returned 0x7e [0129.406] SetLastError (dwErrCode=0x7e) [0129.406] GetLastError () returned 0x7e [0129.406] SetLastError (dwErrCode=0x7e) [0129.406] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921038 [0129.406] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922810 [0129.407] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922810 | out: hHeap=0x920000) returned 1 [0129.407] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.407] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x921468 [0129.408] GetLastError () returned 0x7e [0129.408] SetLastError (dwErrCode=0x7e) [0129.408] GetLastError () returned 0x7e [0129.408] SetLastError (dwErrCode=0x7e) [0129.408] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921118 [0129.408] GetLastError () returned 0x7e [0129.408] SetLastError (dwErrCode=0x7e) [0129.408] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922730 [0129.408] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.409] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0129.409] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x9211f8 [0129.409] GetLastError () returned 0x7e [0129.409] SetLastError (dwErrCode=0x7e) [0129.409] GetLastError () returned 0x7e [0129.409] SetLastError (dwErrCode=0x7e) [0129.409] GetLastError () returned 0x7e [0129.409] SetLastError (dwErrCode=0x7e) [0129.409] GetLastError () returned 0x7e [0129.409] SetLastError (dwErrCode=0x7e) [0129.410] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921038 [0129.410] GetLastError () returned 0x7e [0129.410] SetLastError (dwErrCode=0x7e) [0129.410] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922730 [0129.410] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.411] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921118 | out: hHeap=0x920000) returned 1 [0129.411] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9211f8 | out: hHeap=0x920000) returned 1 [0129.411] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921468 | out: hHeap=0x920000) returned 1 [0129.411] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x8) returned 0x921468 [0129.422] GetLastError () returned 0x7e [0129.422] SetLastError (dwErrCode=0x7e) [0129.422] GetLastError () returned 0x7e [0129.422] SetLastError (dwErrCode=0x7e) [0129.422] GetLastError () returned 0x7e [0129.422] SetLastError (dwErrCode=0x7e) [0129.422] GetLastError () returned 0x7e [0129.422] SetLastError (dwErrCode=0x7e) [0129.422] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x18) returned 0x921478 [0129.423] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] GetLastError () returned 0x7e [0129.423] SetLastError (dwErrCode=0x7e) [0129.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921118 [0129.424] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922730 [0129.424] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.425] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0129.425] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x9211f8 [0129.425] GetLastError () returned 0x7e [0129.425] SetLastError (dwErrCode=0x7e) [0129.425] GetLastError () returned 0x7e [0129.425] SetLastError (dwErrCode=0x7e) [0129.426] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921038 [0129.426] GetLastError () returned 0x7e [0129.426] SetLastError (dwErrCode=0x7e) [0129.426] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922730 [0129.426] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.427] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921118 | out: hHeap=0x920000) returned 1 [0129.427] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x2) returned 0x921498 [0129.427] GetLastError () returned 0x7e [0129.427] SetLastError (dwErrCode=0x7e) [0129.427] GetLastError () returned 0x7e [0129.427] SetLastError (dwErrCode=0x7e) [0129.427] GetLastError () returned 0x7e [0129.427] SetLastError (dwErrCode=0x7e) [0129.427] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x1) returned 0x9214a8 [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x6) returned 0x9214b8 [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x5) returned 0x9214c8 [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.428] GetLastError () returned 0x7e [0129.428] SetLastError (dwErrCode=0x7e) [0129.429] GetLastError () returned 0x7e [0129.429] SetLastError (dwErrCode=0x7e) [0129.429] GetLastError () returned 0x7e [0129.429] SetLastError (dwErrCode=0x7e) [0129.429] GetLastError () returned 0x7e [0129.429] SetLastError (dwErrCode=0x7e) [0129.429] GetLastError () returned 0x7e [0129.429] SetLastError (dwErrCode=0x7e) [0129.429] GetLastError () returned 0x7e [0129.429] SetLastError (dwErrCode=0x7e) [0129.429] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x8, Size=0xd8) returned 0x921118 [0129.429] GetLastError () returned 0x7e [0129.429] SetLastError (dwErrCode=0x7e) [0129.429] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x355) returned 0x922730 [0129.430] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0129.430] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0129.430] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921498 | out: hHeap=0x920000) returned 1 [0129.431] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9211f8 | out: hHeap=0x920000) returned 1 [0129.431] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x8) returned 0x9211f8 [0129.431] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921038 [0129.431] GetLastError () returned 0x7e [0129.431] SetLastError (dwErrCode=0x7e) [0129.431] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0129.431] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921440 | out: hHeap=0x920000) returned 1 [0129.431] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921420 | out: hHeap=0x920000) returned 1 [0129.432] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x920fd0 | out: hHeap=0x920000) returned 1 [0129.432] lstrcatA (in: lpString1="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}", lpString2="4" | out: lpString1="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}4") returned="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}4" [0129.432] OpenEventA (dwDesiredAccess=0x1f0003, bInheritHandle=0, lpName="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}4") returned 0x0 [0129.432] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="d5dbaa177eac3343412148-03845cb8-7441-4a2f-8c0f-b0a3-806e6f6e6963{c20d559d-6c9d-11eb-b0a3-806e6f6e6963}4") returned 0x180 [0129.433] lstrcatA (in: lpString1="", lpString2="/" | out: lpString1="/") returned="/" [0129.441] lstrcatA (in: lpString1="/", lpString2="1474" | out: lpString1="/1474") returned="/1474" [0129.441] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921420 [0129.451] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921038 [0129.453] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921060 [0129.453] DeleteUrlCacheEntryA (lpszUrlName="t.me") returned 0 [0130.201] DeleteUrlCacheEntryA (lpszUrlName="https://t.me/korstonsales") returned 0 [0130.201] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0131.656] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0131.657] InternetConnectA (hInternet=0xcc0004, lpszServerName="t.me", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0008 [0131.659] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/korstonsales", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc000c [0131.661] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0137.542] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0137.544] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x25a3) returned 1 [0137.544] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0137.545] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0137.545] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0137.547] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x25b0) returned 0x922730 [0137.548] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921060 | out: hHeap=0x920000) returned 1 [0137.548] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0137.548] StrCmpCA (pszStr1="\n\n \n \n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n
\n \n
\n
\n
\n
\n \n
\n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0137.550] lstrlenA (lpString=0x0) returned 0 [0137.550] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0137.550] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921420 | out: hHeap=0x920000) returned 1 [0137.559] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0137.559] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0137.562] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0137.562] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0137.565] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0137.565] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x921420 [0137.565] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0137.566] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921420 | out: hHeap=0x920000) returned 1 [0137.566] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0137.568] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0137.568] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0137.568] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0137.568] InternetConnectA (hInternet=0xcc0004, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0008 [0137.568] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc000c [0137.569] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0138.114] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0138.114] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37e7) returned 1 [0138.114] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0138.118] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0138.118] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0138.118] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x37f0) returned 0x922730 [0138.119] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0138.119] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0138.120] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0138.120] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n
\n\n
\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n\n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n

\n
\n \n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0169.694] lstrlenA (lpString=0x0) returned 0 [0169.694] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0169.695] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0169.695] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0169.695] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0169.695] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0169.695] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0169.695] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0169.695] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0169.695] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x922730 [0169.695] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0169.695] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0169.696] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0169.696] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0169.696] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0169.696] InternetConnectA (hInternet=0xcc0010, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0014 [0169.696] HttpOpenRequestA (hConnect=0xcc0014, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0018 [0169.697] HttpSendRequestA (hRequest=0xcc0018, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0169.944] HttpQueryInfoA (in: hRequest=0xcc0018, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0169.944] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37fb) returned 1 [0169.944] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0169.947] InternetCloseHandle (hInternet=0xcc0014) returned 1 [0169.947] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0169.947] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x3800) returned 0x922758 [0169.948] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0169.948] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0169.948] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0169.948] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n\n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n

\n
\n \n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0201.422] lstrlenA (lpString=0x0) returned 0 [0201.423] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0201.423] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0201.423] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0201.423] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0201.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0201.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0201.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0201.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0201.423] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x922730 [0201.424] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0201.424] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0201.428] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0201.428] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc001c [0201.428] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0201.428] InternetConnectA (hInternet=0xcc001c, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0020 [0201.428] HttpOpenRequestA (hConnect=0xcc0020, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0024 [0201.428] HttpSendRequestA (hRequest=0xcc0024, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0201.648] HttpQueryInfoA (in: hRequest=0xcc0024, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0201.649] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37f9) returned 1 [0201.649] InternetCloseHandle (hInternet=0xcc0024) returned 1 [0201.653] InternetCloseHandle (hInternet=0xcc0020) returned 1 [0201.653] InternetCloseHandle (hInternet=0xcc001c) returned 1 [0201.653] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x3800) returned 0x922758 [0201.654] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0201.654] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0201.654] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0201.654] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n\n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n

\n
\n \n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0223.039] lstrlenA (lpString=0x0) returned 0 [0223.039] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0223.040] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0223.050] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0223.050] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0223.050] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0223.050] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0223.050] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0223.050] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0223.050] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x922730 [0223.050] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0223.051] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0223.053] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0223.054] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0028 [0223.054] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0223.054] InternetConnectA (hInternet=0xcc0028, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc002c [0223.054] HttpOpenRequestA (hConnect=0xcc002c, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0030 [0223.054] HttpSendRequestA (hRequest=0xcc0030, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0223.300] HttpQueryInfoA (in: hRequest=0xcc0030, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0223.300] InternetReadFile (in: hFile=0xcc0030, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37f3) returned 1 [0223.300] InternetCloseHandle (hInternet=0xcc0030) returned 1 [0223.306] InternetCloseHandle (hInternet=0xcc002c) returned 1 [0223.306] InternetCloseHandle (hInternet=0xcc0028) returned 1 [0223.306] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x3800) returned 0x922758 [0223.307] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0223.307] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0223.308] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0223.308] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n\n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n

\n
\n \n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0244.868] lstrlenA (lpString=0x0) returned 0 [0244.869] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0244.869] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0244.869] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0244.869] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0244.869] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0244.869] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0244.869] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0244.869] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0244.870] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x922730 [0244.870] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0244.870] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0244.876] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0244.876] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0034 [0244.876] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0244.876] InternetConnectA (hInternet=0xcc0034, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0038 [0244.877] HttpOpenRequestA (hConnect=0xcc0038, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc003c [0244.877] HttpSendRequestA (hRequest=0xcc003c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0245.091] HttpQueryInfoA (in: hRequest=0xcc003c, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0245.091] InternetReadFile (in: hFile=0xcc003c, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37e9) returned 1 [0245.091] InternetCloseHandle (hInternet=0xcc003c) returned 1 [0245.094] InternetCloseHandle (hInternet=0xcc0038) returned 1 [0245.095] InternetCloseHandle (hInternet=0xcc0034) returned 1 [0245.095] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x37f0) returned 0x922758 [0245.095] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0245.095] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0245.096] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0245.096] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n\n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n

\n
\n \n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0266.239] lstrlenA (lpString=0x0) returned 0 [0266.239] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0266.240] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0266.240] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0266.240] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0266.240] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0266.240] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0266.240] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0266.240] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0266.240] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x922730 [0266.240] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0266.240] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0266.242] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0266.242] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0040 [0266.242] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0266.242] InternetConnectA (hInternet=0xcc0040, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0044 [0266.242] HttpOpenRequestA (hConnect=0xcc0044, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0048 [0266.243] HttpSendRequestA (hRequest=0xcc0048, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0266.431] HttpQueryInfoA (in: hRequest=0xcc0048, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0266.431] InternetReadFile (in: hFile=0xcc0048, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37f1) returned 1 [0266.431] InternetCloseHandle (hInternet=0xcc0048) returned 1 [0266.435] InternetCloseHandle (hInternet=0xcc0044) returned 1 [0266.435] InternetCloseHandle (hInternet=0xcc0040) returned 1 [0266.435] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x3800) returned 0x922758 [0266.436] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0266.436] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0266.437] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0266.437] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n\n Telegram: Contact @korstonsales\n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n \n \n \n \n \n

\n
\n \n
\n
\n
\n \n
\n
\n If you have Telegram, you can contact @korstonsales right away.\n
\n\n\n\n
\n \n
\n
\n\n
\n\n \n\n \n \n\n\n", pszStr2="ERROR") returned -9 [0287.593] lstrlenA (lpString=0x0) returned 0 [0287.593] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0287.594] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921038 | out: hHeap=0x920000) returned 1 [0287.594] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0287.594] StrCmpCA (pszStr1="ERROR", pszStr2="ERROR") returned 0 [0287.594] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921038 [0287.594] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x921070 [0287.594] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x30) returned 0x9210a8 [0287.594] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x9210e0 [0287.594] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x20) returned 0x922730 [0287.594] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210e0 | out: hHeap=0x920000) returned 1 [0287.594] DeleteUrlCacheEntryA (lpszUrlName="climatejustice.social") returned 0 [0287.595] DeleteUrlCacheEntryA (lpszUrlName="https://climatejustice.social/@ffoleg94") returned 0 [0287.596] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc004c [0287.596] StrCmpCA (pszStr1="https", pszStr2="https") returned 0 [0287.596] InternetConnectA (hInternet=0xcc004c, lpszServerName="climatejustice.social", nServerPort=0x0, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0050 [0287.596] HttpOpenRequestA (hConnect=0xcc0050, lpszVerb="GET", lpszObjectName="/@ffoleg94", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x4800000, dwContext=0x0) returned 0xcc0054 [0287.596] HttpSendRequestA (hRequest=0xcc0054, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1 [0287.935] HttpQueryInfoA (in: hRequest=0xcc0054, dwInfoLevel=0x13, lpBuffer=0x19f33c, lpdwBufferLength=0x19b630, lpdwIndex=0x0 | out: lpBuffer=0x19f33c*, lpdwBufferLength=0x19b630*=0x3, lpdwIndex=0x0) returned 1 [0287.935] InternetReadFile (in: hFile=0xcc0054, lpBuffer=0x19b8a4, dwNumberOfBytesToRead=0x3a97, lpdwNumberOfBytesRead=0x19b634 | out: lpBuffer=0x19b8a4*, lpdwNumberOfBytesRead=0x19b634*=0x37ef) returned 1 [0287.935] InternetCloseHandle (hInternet=0xcc0054) returned 1 [0287.939] InternetCloseHandle (hInternet=0xcc0050) returned 1 [0287.939] InternetCloseHandle (hInternet=0xcc004c) returned 1 [0287.939] RtlAllocateHeap (HeapHandle=0x920000, Flags=0x0, Size=0x37f0) returned 0x922758 [0287.939] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x9210a8 | out: hHeap=0x920000) returned 1 [0287.939] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x922730 | out: hHeap=0x920000) returned 1 [0287.940] HeapFree (in: hHeap=0x920000, dwFlags=0x0, lpMem=0x921070 | out: hHeap=0x920000) returned 1 [0287.940] StrCmpCA (pszStr1="\n\n\n\n\n\n\n\n\n\n\n\nffoleg94 (@ffoleg94@climatejustice.social) - Climate Justice Social\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n
\n\n
\n
\n
\n\n\n
There is nothing here!
\n
\n
\n
\n\n\n
\n
\n\"Climate\n
\n
\n

Welcome to this official Fediverse instance for climate justice activists.\r\n
\r\n
\r\nThere is also:\r\nclimatejustice.rocks\r\nalso for activists\r\n